U.S. Department of Justice 
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Ww Ikn, B C 20535-0001 


May 24, 2004 


Honorable Frank R. Wolf 

Chairman 

Subcommittee on Commerce, Justice, State, and Judiciary 
Committee on Appropnations 

United States House of Representatives 

Wastungton, D.C. 20515 


Dear Mr. Chairman: 


By letter to FBI Director Mueller dated March 18, 2004, you requested responses 
to numerous questions concerning intelligence analysis and dissemination, FBI organizational 


changes, and other matters. 


We have worked diligently to provide accurate and thorough responses to each of 
your inquines and appreciate your patience as we prepared the enciosed responses. 


Please feel free to contact me if we may be of further assistance in responding to to 
these or other inquiries. 


Ee. 

fy S. 
Co JA, Pbk. 
Elem P. Kuliseh 


Assistant Director 
Office of Congressional Affairs 


Honorable Jose Serrano 

Subcommittes on Commerce, Justice, State, and Judiciary 
Committee on Appropriations 

United Staies House of Representatives 

Washington, D.C. 20515 
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FBI Responses to Questions Posed 
By Letter Dated March 18, 2004 


1, What were the major lessons the FBI learned from 9/11/2001? 


Response; 
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complex challenges Today's terronsts 
ated 


XX 


The terrorist threat of today presents 
operate seamlessly across borders and continents, aided by sophistica 
communications technologies, de ey finance their operations with elaborate 

funding schemes, and they patiently and methochcally pian and prepare iheir 


attacks 


To meet and defeat this threat, the FBI must have several omtical capabilities 
First, we must be intelligence-dnven. To defeat ihe terronsts, we must be able to 
develop intelli x ice about their plans and use that intelligence to disrupt those 
plans. We must be global. We must continue our efforts to develop our overseas 
operations, cur ee with foreign services, and our knowledge and 
expertise about foreign cultures and our terrorist adversaries overseas. We must 
have networked information technology systems. We need the capacity to manage 
and share our informahon effechvely Finally, we must remain accountable under 
the Consttunon and the rule of law. We must respect civil liberties as we seek to 
protect the American people. | 


Prior to September 11, 2001, vanous wails exsted that prevented the FB] from 
shanng not only with other members of tbe United | States Intelligence Community 
(USIC), but witan the FBI itself. Legal walls — real and perceived -- prevented 
the integration of intelligence and criminal tools terrorista invest! gations 
e uúltural walls -- real and percerved -- contmued to hamper coordination between 
he FBI the c LA, and other members of the USIC. Operational walls -- real and 
ae ed — between the FBI and our partners an state and local i enforcement 
contmued to be a challenge Since the September 11th attacks, we and our 


partners have been breaking down each of these walls 


The legal walls between mtelligence and law enforcement operations that 
handi capped us before 9/11 ae been shmunated. The PATRIOT Act, the 
Attorney General's intelligence shanng procedurss, and the opinion from the 
Foreign Intelligence Surv ie : Court of Review tore down the legat 
impediments fo coordination and information-shanng between enmunal 
investigators and inteihgence agents We can now fully conrdmate operations 
nthe Bureau and with the USIC We can also depioy the fuil range of 
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investigative tools — both criminal processes like search warrants and grand jury 
subpoenas and inteihgeuce authorities [ike FISA wiretap warrants -- to 1dentify, 
investigate, aud neutralize terrorist threats. With these changes, we in the Hureau 
can finally take full operational advantage of our dual role as both a law 
enforcement and an intelligence agency 








We ars eliminating the wall that histoncally stood between us and the CLA The 
FPI and the CÍA started exchanging senior personnel in 1996, and we have 
worked hard to build on that effort. Today, we and the CLA are integrated at 
virtually every level of our operations. From Director Muellers daily meetings 
with George Tenet and with CLA officials at his twice-daily threat briefings, to our 
joint efforts in transnational mvestigat.ons, to our coordinated threat analysis at 
the Terrorist Threat sae ins renter (TIC), the FBI and the CIA have 
enhanced our mieraction at every leve... This integration wiil be further enhanced 
later this year when the par s Counterterrornsm Division (CTD) collocates with 
the CLA's Counterterrorism Center (CTC) and the TTIC ata new facility in 
Virgmaa. 


We have also worked hard to break down the walls that have, at times, hampered 
coordination with our 750,000 partners ut state and local law enforcement. We 
have more than doubled the number of Joint Terrorism Task Forces (TITS) since 
9/11. We have processed thousands of security clearances to permit law E 
enforcement officers to share freely in our investigative information. We have 
created and refined new information shanng systems that electronically link us 
with our domestic partners And, we have brought on an experienced police chief 
from North Carolina to serve as our State and Local Law Enforcement 
Coordinator 


2. Given these lessons learned, what specific and concrete remedial measures is the FBI, 
working with Federal, State and local partners, taking to ensure that the organization has 
enhanced its capacity to prevent future such catastrophic terrorist attacks on the 


homeland? 


Response: 
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Since September 11, 2001, the FBI has undertaken a number of initiatives to 
unprove information sharing and coordination with our national and :ntemational 
partners. We began by quickly increasing the number of JTTEs across the 
country, bringmg the number up from 35 to: B4 nationwide. The JTTEs partner 
FBI personnel with hundreds of investigators from various federal, state, and local 
agencies and are important force mulüplers un the fight agamst terrorism. 


We also established a National Jost Terrorism Task Force (NITTE) at FBI 
Headquarters (FBIHO, staffed by representatives from 38 federal, state, and local 
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agences The NITTE conducts Maison wih the iocal FT T?s and other 


NES 


dus pating agencies and acts as a conduit for mformaton on terorist threats and 
The mission of the NITTF is to enhance communication, coordination, and 
cooperation by acting as the "hub" of support for the ]TTFs throughout the United 
tates, providing & point of fusion for untelh gence acquired m support of 
coum iro sm (CT) operations la order to fulfill this mission, the NITTF bas 
coordinated efforts to establish the FBI's Law Enforcement Online (LEO) virtual 
private network as the pniraary Internet-based information sharing piatform for ail 
law enforcement agencies tn the Umted States LEO operates in a "law 
enforcement sensitive" environment, enabling any law enforcement agency with à 
LEO account and an Interest connection ts share terronsm information with 
JTYEs. The NITTE is algo working with LEO and the FBI's Office of Law 
Enforcement Coordination (OLEC) on the FBI Electrons National Alert System, 
which instantly notifies law enforcement of incidents that need immediate 
attengon. This system was implemented ai October 2003 and distributes istant 
messages directly to the LEO accounts and persona] elecirome devices (e.g. 
pagers, personal digital assistants, and cell phones) of parhcipating law 
enforcement officials 







In February 2002, the FBI dissenunated the first FBI [Intelligence Bulletin. Since 
then, more than 120 bulletins have gone out io more than 18,000 law enforcement 
agencies and 60 United States Government agencies and their subcomponents, as 
welles government agencies in the Urted Kingdom, Canada, New Zealand, and 
Australia. The FBI Intelligence Bulletin is disseznunated every Wednesday, with 

additional Special Edition Bulletins issued as curcumstances warrant through four 
ice nisms” LEO, the Nationa! Law Enforcement Telecommunications System 
ONLETS), the National Threat Warmng System teletype, and tbe Regional 
Information Sharing System 


In May 2003, the Department of Homeland Security (DHS), the FBL the CLA, the 


State Department, and the Department of Defense established the TTIC io assess 
terrorism related intelligence collected domestically and abroad in order to form 


the most comprehensive possible threat picture. This summer, the TTIC, along 
with a porhon of the FBI's CTD and the Director of Central Intelligences (DCTs) 
CTC, will be collocated in a angie new facility 


me dm mber 1, 2003, the FBI m conjunction with DHS, the State Department, 
membre of the USIC, stood up the Terrorist Screening Center (TSC) The 

meson of the TSC is to use information denved from the USIC and law 

ent orcement agencies to identify known or suspected terrorists who have 

particular interactions with United States authonties, such as being pulled over 
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dunng pue traffic stops, bemg scrsened while attempung to enter the United 
States, or applying for a visa. overseas. The TSC wall consohdate unciass: fed 


ide atf iers from Uruted States Government terronst databdaes and provide 24.7 
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operational support for thousands of federal, state, and local screeners across the 
country and around the world. The TSC wil ensure that government 
investigators, screeners, and agents are working off the same unified, 
comprehensive set of anti-terrorist information, and that they have access to 
miormatión and expertise that will allow them to act quickly when a suspected. 
tesrorist 1s screened or stopped. La its first two-and-a-half months of 22 non, 
the boh recerved 1,848 calls from state, Federal, and local ind enforcement 
personnel, based on potential matches with known terrorisis.. This Made m the 
pst vei dent fication of 740 individuals, some of Mes have been apprehended 


d some af whom have | been developed as informants or subjected to 
survelance. On March 1i, 2004, the TSC began usin F he Terrorist Screening 


Database (TSDB) The TSDB is the result of TSC's efforts to consolidate 
disparate mformation currently held by multiple agencies and used in different 
ways.into one unciass:fied law enforcement sensitive database that contains 
identifyimg information regarding known or suspected terronsts. The TSDB 
serves a single purpose — to help identify aud detain potential terrorista in order to 
prevent fliture terrorist attacks. 


On December 3, 2003, the FB! es the OLRC to dein the FBI's 
cooperation and substantive relatio hips with jis state and local law enforcement 


counterparts. The OLEG, which is run by. a former E oi Police, also has 
liaison respousibilines with the White House Homeland Security Council = 


D 


In addition, the FBE has moved to enhance the capabilities of its international 
Legal Attaché (Legat) o?Bces. In the aftermath of the September 11 attacks, and 
throughout the following year, FBI Legats facilitated the rapid deployment of 
approximately 700 FBI personnel overseas Last year, FBI Legats handled 
approximately 53,000 leads. The FBI's Legat program currently consists of 46 
offices around the world, and new offices have been opened or are projected to 
open in the following locations’ Abu Dhabt, United Arab Enurates, Kuala 
Lumpur, Malaysia; Sansa, Yemen; Tbilisi Georma; and Tums, Tunisia. In 
addinon, the FBI i5 reviewing the possibility of establishing sub-offices of three 
existing Legats in Bonn, Germany (Legat Berlin}; Milan, Italy (Legat Rome); 
and Toronto, Canada (Legat Ottawa). The Legats in Amman, Islamabad, Manila, 
Ottawa, Riyadh, and Cairo are being augmented with additional personnel. 


Improved Analytical and Intelligence Capabilities 


In October 2001, the FBI established a College of Analytical Studies (CAS) in 
order to provide training for all FBI analytical. support pe: rsonnel The curmnculum 
was developed with the recommiendations and participation of the CLA, the Joint 
Mihtary Intelligence College, and private ecucational msttutions. The e framing 
includes basic and advanced courses at Quantico, as well as CIA courses, Last 
year, more than: 900 analysis completed six-week traming courses, This traning, 
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By cag 2002, the PBT had established an pus d Program and hag 
"sod up" its Office of Intelligence (OD, ied by an Execanve Assistant Director 
for Entelligence. The Ol is staffed by FBI and CLA pain who examine 
mtelhgence and ensure it is shared within the FBI, among JTTFs, and with TTIC 
and the rest of the USIC. In addition, the Ol designs and manages a high-ievel 
daily intelligence product for the Director and other key FBI executives. Thus 
product heips Pre the Director for his daily briefings ofthe President and the 
Áttomey General in the period irom October 2002 to September 2003, the FBI 
produced 2,425 Intelhgence Reports. 


The FBI has always operated as Doth a law enforcement and an intelligence 
agency based on its dual mission to investigate and arrest the perpetrators of 
completed crimes (the "law enforcement mission") and to collect intelligence that 
will help prevent future crimes and assist policy makers in their decision making 
(the “unteliigence mission"). History bas shown thai the FRY is most effective in. 
protecting the Umicd States when it performs these two missions in tandem 


Revised Training Curriculum for New Agents * 


The FRI has expanded the integration of CT and counterinteligence (C1) tramung 
into every facet of New Agents training Since September 11, 2001, an an additional 
32 hours of CT and CI maming have been added to the curriculum, for à total of 
55 hours. Last year, a number of additional in-service courses were offered, 
inciading: Basic International Terrorism Operations, Basic Analyst School, 
Advanced Analytical courses, and CT Management for field supervisors. in 
addition, all FRI field offices provide eight hours of CT awareness training 


Enhanced Language Translation Capability 


The FBI's approximately 1,200 translators are stationed across 32 Meld offices and 
Headquarters, and are now connected via secure networks that allow a translator 
mone FBI office to work on projects for any other office. Since the beginang of 
FY 2001, the FBI has recruited and processed more than 30,000 translator 
applicants. These efforts have resulted in the addition of nearly 700 new hnguists 
with a "Top Secret” security clearance 

In addon, shortly after September 11, 2001, the PRI formed a Language 
Services Translation Center to act as à "comniand and control center to coordmaté 
translator assignments and maximize its capacity to render ummediate transiation 
assistance On Febniary L1, 2003, m accordance with the USA PATRIOT Act, 
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the Director of the CLA sstablished the National Virtual Translation Center and 
designated the FS] as is Executive Agent. Like the Language Services 
Transiation Center, this Center acts as a clearinghouse to provide hmely 
transiations for USIC agencies. 


Increased Foreign Intelligence Surveillance Act (BISA) Collection 


FISA coverage has increased significantly since September 11, 2001, reflecting 
both the FBI's increased focus on CT and Cl invesngations and improvement in 
the operation of the FISA process. From 2001 to 2003, the number of FISA 
apphcations filed annually with the Foreign Intelligence Surveulance Court 
increased by 85 percent. The FISA Court's granting of such FISAs has helped the 
FBI investigate terronst networks and operations and disrupt terronst plots. In 
addition, the USA PATRIOT Act made a nember of important changes to FISA. 
procedures that have assisted the FBI's CT efforts. The most important of these 
was the dismantling of many of the walls between criminal and intelligence 
operations, This has given the FBI the ability to coordinate its intelligence and 
criminal investigations and to use the fall range of investigative tools against 
suspécted terrorists. 


For example, on the intelligence side of an investigation, the FBI can: conduct 
surveillance on a suspected terrorist to learn about his movements and to identify 
possible confederates, obtain FISA authority to monitor his conversations, and/or 
approach and attempt to cultivate hum as ¿source or an operational asset. On the 
criminal sido, the FB] now has the option of incapacitating the suspect through 
arrest, detention, and prosecution. Lowenng the wall allows the FEE to 
continuously balance the opportunity to develop intelligence agamst the need to 
apprehend the suspect and prevent hum irom carrying out his terrorist plans. This. 
integrated approach has allowed the FBI to foil terronst plots from Seattle, 
Washington, to Detroit, Michigan, to Lackawanna, New York. 


Specialized New CT Units 


Ou September 11, 2001, the FBI established the CT Watch Umt (then called the 
"Executive Watch") as the FBIs 24-hour central clearmghouse for terrorist threats 
and actionable mtelhgencs, As the FBI's "Threat Central," CT Watch is the focal 
point for the receipt, preliminary analysis, and immediate assignment for action of 
ali ierrorism threats It ensures that all FBI Field Offices and Legats, all relevant 
government leaders and agencies, all ITTFs, and all state and local law 
enforcement agencies receive timely noufication of terronst threats. CT Watch is 
also responsible for produemy several daily publications, including: 


- The Directors Daily Briefing Book, which contains a daily update on all 
significant threat information and current terramsm investigations 
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The FRI Daily CT Ur which contains a summary of significant 
oppgang Or very recent incidents that may be terrorism related. 





The Daily Intelligence Summary, which contains 2 daily update of 
significant mtelligence collected concerning terrorist operations. 


The FBI also established the Terrorist F:insnemg Operations Section (TFOS), 
which is devoted entirely to the financial aspects of terrorism investigations. 


M 


TROS has focused on information shanng and the abilities ofthe ITTEs and 


Cernir ial Investigative units an the field to identify, predict, and prevent future 
criminal enterprises, In cooperation with the financial services industry, the FBI 
has frozen more than $172 million in financial asseta from organizations that 
support terrorist. 


In early 2002, the FB] created "Flying Squads" to provide rapid, highly mobile 
support for terrorism investigations around the globe, These teams have expertise 
15 CT, FISA requirements, foreign languages, and inteiligence analysis, as well as 
specialized knowledge of al Queda and familiarity with the USIC. 


In December 2092, the FBI estabhshed tbe Communications Exploitation Section, 
which analyzes terrorist electronic and telephone communications and identifies 
terrorist associations and networks. The following month, we established the 
Document Exploitation Unt, which identities and disseminates intelligence 
gleansd from millions of pages of documents and computer data seized overseas 
by intelligence agencies. 


Restructuring of CTD Branches 


la order to improve our ability to address the terrorist threat, CTD has heen 
restructured. The basic structure and the recent changes designed to make CTD 
more effective in this mission follow 


CTD is compnsed of three Branches: CT Operations, CT Analysis, and 
Operational Support. 


CT Operations Braneh 


The CT Operations Branch supports, coordinates, and manages terronsmerelated 
investigahons This Branch is comprised of four sections. 


: The International Terrorism Operations Section I supports, coordinates, wid 
provides oversight of FBI international CT operations related to al C Jaeda and 


other Suant extremist groups. 
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The International Termonen Operations $ Section H supports, coorámates, and 
provides oversight of FBI intemational CT operations related to other groups, 
such as Hizballah, HAMAS, and Palestinian islamic Jihad, as well as the terrorist 
threat from state sponsors of terrorism. 








The Domestic Terrorism Weapons of Mass Destruction Operations Section 
supparis, coordinates, and provides oversight of FBI domestic CT operations, 
including animal rights extremists and eco-terrorists In addition, this Section's 
Special Events Unit plays a major role in planning, coordinaung, and managing 
support to field offices charged wui CT responsibilines for special events such as 
the Super Bowl, the Olympic Games, and the Republican and Democratic 
Nahonal Conventions. 








The Terrorism Reports and Reqiurements Section (TRRS) oversees the 
dissemination of raw intelligence reports and implements policies and procedure 
established by the OL Since its inception in 2002, TRRS has disseminated more 
than 2,800 intelligence information reports to members of the intelligence, pokey, 
and law enforcement communities. When possible, these reports have besa 
produced at the unclassified level in to order to allow rapid information sharing 
with state and local security entes 





Operational Support Brauch 





The Operational Support Branch is comprised of three sections: National Threat 
Center Section, CT Operational Response Section, and Terrorist Financing 
Operations Section The National Threat Center and CT Operational Response 
Sections have been reorganized to better accomplish CTD's mussion. 


- The National Threat Center Section administers CT Watch, which 18 discussed 
above, «s well as four other units relating to threat management. 





1. The Threat Monitoring Unit (TMU) supports the FBI's operational role 
in defending the United States from the threat of terrorism by receiving, assessing 
and disseminating threat information and information regarding suspicious 
activities in conjunction with FBIHQ, FBI Field Offices, Legats, and the USIC, 
Each month, the TMU processes approximately 1,000 threat and suspicious 
activity referrals from various federal. state, and local governmental and law 
enforcement agencies, ensunng that the appropnate, FBI units, ITTF s, and other 
government agencies are expeditiously apprized of the threat information. In 
addition, more than 2,700 sugmficant threat and suspicious activity reports have 
heen recorded mto a searchable database of TMV threats. 





2. The Public Access Center Unit (PACU) provides the public with safe, 
feliabis. and effective avenues to report information regarding terrorist and other 
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caminal activity to the FBI via the Internet and a toll-free telephone hotline The 
PACU) which receives and disseminates approximateiy 100 threat leads per 
month, also analyzes and processes this Information for FRI investigative and 
intelligence purposes and for dissemunation to appropriate federal, state, local, and 
international organizations The FBLand DHS developed a 120-day pilot program 
in which the FBI will route all DHS web site tip information to the FSI tip web 
site for procesang by the PACU. The PACU will then provide DHS with the 


= 


ability to view and track the work flow related to these tips in real-tame and to 
receive unmediate notification when the FBI requests assistance from its field 
offices 


3. The Terroust Watch and Warning Unit (TWWU) provides current 
terronsi-relaled intelligence mformation and analysis to a broad spectrum of users 
through the FBI's Intelligence Bulletin discussed above In addition, the TWWU 
produces Special Event Threat Assessments that provide localized strategic threat 
analysis for field offices and local law enforcement agencies hosting large-scale 
special events such as the Super Bow!, New Year's Eve festivities, and the 
President's State of the Union address. The TW WU has disseminated over 140 
Special Event Threat Assessrients and updates The TW WU is also responsible 
for the FBI's Terronst Watch List (UWL), which 1s available to nationwide law 
enforcement through the National Crime Information Center. The TWL contains 
ames of current subjects. of FBI CT investigations 


4. The Strategic Information and Operations Center (SIOC) is primarily 
an administrative unit which supports the flow of information among the various 
FBI uruts and between the FB] and outside agencies. Information concerning 
significant incidents and case updates is communicated to SIOC via telephone, 
e-mail, and fax, and is immediately routed by the STOC staff to the appropnate 
outside agencies, FBIHQ Units, FBI Field Offices and/or Legats. SIOC also 
disseminates NLETS messages to government agencies throughout the U. 5. and 
publishes the “SIOC Morning Report," a dady summary of pertinent intelligence 
arneles fróm the FBI and other USIC elements, which is distnbuted to PRI Field 
Offices and to ITTF members across the country. 


- The CT Operational Response Section lends. critica! support im three areas: 

: MRS AED ES . 
supporting the NITTE, coordinating depioyment of the Headquarters-based Flying 
Squads and the field office-based Rapid Deployment Teams, and conducting 
haison with the Department of Defense (neluding the management of FBI 
personnel working with the pultary i5 Guantaname Bay, Cuba, and ui 


Afghanistan). 
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CT Analysis Braneh 


The CT Analysis Branch oversees the bulk of CTD's intelbgence functions, 
including analysis, evidence exploitation, and the preparation and dissemination 


ixi 


of firished intelligence products and bnefing matenals. The CT Analysis Branch 
operates with the guidance and oversight of the FBI's Oi andas a vital part oi the 
FB's enterprise-wide intelligence programa. This Branch is comprised of two 
sections. 


- The CT Anaivsis Section includes five units whose areas of focus mirror those 
of the sections in the CT Operations Branch (though this is not a one-for-one unit- 
to-section match because the alignments differ somewhat). In support of the FBI's 
CT operations, these units examine the composition, activities, tradecraft, 
ideology, and linkages of terronst groups, and they assess terrónst activities and 
threats in order to assist FBT managers in making decisions about deployments 
and the allocation of resources. 


information denved from the full range of media, This Section is an essential 
participant in the National Document Exploitation Center process, 


3. In what time frame will these chauges be implemented? 


Response: 


The changes outlined above have been implemented. With the FBICTD's 
relocation with TTIC and components of the CIA m the summer of 2004, the 
FBI's reorganization will be nearly complete. 


4. How would you assess your progress thus far? 


Response: 
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Wiule the FBI still has much work to do, the Bureau is moving forward steadily 
and m the right direction. Working with our partners m the United States and 
abroad, we have disrupted and detamed supporters of al Qaeda from Lackawanna, 
New York, to Portland, Oregon; we have participated an the detention of much of 


al Qaeda's leadership, and we have seized millions of dollars m terrorist Guanciag. 
With the recent creation ofan intelligence agent career track and the 
implementation of administrative reforms related to building an intelligence 
workforce, the FBI has im place the essential structural elements of an 


A 
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intelhgence«drven CT operation The challenge now is to refine and contmae to 
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develop that operation — an effort that will require resources, continued attention 
by ae leadership, and constant trainmng of FBI personnel in intelligence processes 
d objectives 


While the FBI has clearly made substantial progress over the past z 2 1/2 years, 3618 
difficult to measure with precision the current effectiveness ofits CT efforts 
Besides cating the absence of successful attacks on the homeland since September 
11, 2001, there is no single measure that compietely captures the progress made, 
There are several yardsticks, however that demonstrate the effectiveness of the 
sore functions of a CT Program. These yardsticks include, and show progress 1n, 
the following areas: 


Development of human assets 
Number of FISAs 

Quality of daily briefings 
Effectiveness of CT operations 
Continued protection of civil liberties 


un d d ba oe 


Success Stories 


Of course, the most unportant aspect of all of these changes and reorgamzshons is 
the degree to which they have aided the FBI in disrupting and destroying terrorist 
threats. Pina um are a few of the FBI's success stories. 


The Lackawanna Six 
On September 13, 2002, the FBI arrested five United States citizens near Buffalo, 


New York (Sakim Alwan, Faysal Gaiab, Yahya Goba, Shafal Mosed, and Yasei 
Taher), charging them with "providing, attempting to provide, and conspiring to 
provide material support and resources to a designated foreign terrorist 
orgarzation.” In addition, Mukhtar Albakn, also a United States citizen, was 
rendered from Bahrain to the United States pursuant to an arrest warrant on the 
same charges All six individuals were indicted on these charges on October 2], 
2002 The arrests and indictments were based on information indicating that these 
individuals traveled to an al Qaeda training camp in Afghanistan in the springs 
summer of 2001, where they reserved military tremeng and were visited by Usama 
Bin Laden, All six subjects pled guilty to terrorst-related charges and received 
prison sentences ranging between seven and ten years. These subjects are also 
cooperabng with ongoing terrorist my estigations and have provided si gnibcant 
information 


Benevolence International Foundation 
Ensam Amout was the Executive Director of the Benevolence International 
Foundation (BIF) BIF was a Chicago, Hlmois-based charity long recognized by 
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the IRS as a non-profit orgamzaton. The group's purpose 
objectives were, ostensibly, to provide humanitanan relief aid. However, the 
recipients of the "humanitarian aid" were ultumately revealed to. be terronst 
groups, mehuding Al-Qaeda Amiout was indicted m October 2002 The 
indictment desenbed a multenanonal enminal enterprise that, for at least as 
decade, used chartable donations from unwitting Mushm-Americans, non- 
Muslims, and corporations to covertly support Al-Qaeda, the Chechen 
Mujahideen, and armed violence in Bosnia. The indictment alleged thet BIF was 
aperated as a comunal enterprise that engaged im a pattern of racketeering activity 
Tn addition to fund-rcatsiag, the group acted as a conduit through which other 
material support was provided to further the violent activities of the mujahideen 
and other terronet organizations. Arnout ultimately pled guiity to a matemal- 
support based racketeering conspiracy violation and aduntted that donors to BIF 

i 








into belreving their donations would support peaceful causes when, m. 


fact, funds were expended to support violence overseas. 


were masle 


On October 3, 2002, six individuals were indicted on federal charges in the. 
District of Oregon. The six (Ahmed Bilal, his brother, Mohammad Bal, Habes 
AlSaoub, Patnce Ford, Jeffrey Battle, and October Lewis) were charged with 
conspiracy to levy war agamst the United States, conspiracy to provide material 
support und resources to a terrorist organization, conspiracy to contribute services 
to al Qaeda and the Taliban, and possessing firearms in furtherance of crimes of 
viclence. The following day, Battle, Ford, and Lewis were arrested in Portland 
and Muhammad Bilal was errested in Detroit, Several days later, Ahmed Bilal 
was apprehended in Malaysia and returned to the United States. With the 
exception of Ai-Saoub, these subjects have pled guilty to terronsm related and 
money laundenng charges and have received federal sentences ranging trom three 
to eighteen years The only subject who has not heen brought to justice, Al Saouh, 
i5 believed to have been killed in Pakistan by Pakistani military authorities 
Earnest James Ujamma 
On July 22, 2002, Eames: James Ujamma, aka Bilal Ahmed, was arrested on a 
ateral witness warrant. Ahmed is suspected of bemg involved in a terronst 
training facility in Bly, Oregon, and providing other material support to terrorism 
On August 28, 2002, he was indicted on charges of couspiracy to provide material 
support and resources to a terrorist organization and possessing Rrearms in 
furtherance of a come of violence, Bilal Ahmed is an &mencan-bom Mushm 
convert who has worked for and provided services to Abu Hamza al-Masn. These 
services included taking computers to the Taliban pror to United States action im 
Afghanistan, as well as introducing a current Guantanamo Bay detainee to 
mdnaduals at al Qaeda tramag camps in Afghanistan, enabling their 
mameulation toa terror rante camp. Ahmed was under investigation based 
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on. information that he (on behalfoí the Egyptian-bor Sheikh Abu Hamza al- 
Masri of the Finsbury Park Mosque in London) provided material support to 
terrorism by attempting to establish a ‘raming camp in southern Oregon, pursuant 
to Rarnza’s Jihad récrürtng program, and served as Hamzas representative for the 
delivery of cash; camputer hardware and sofnware, and at least one combatant to 
Taliban and al Qaeda act’ tias inside Afghamstan. Ü jarama has pled guilty to 
terrónismeorelated charges and has received a two-year sentence. This 
investigation, coupled with Ujamma’s cooperation, has provided a wealth of 
intelbgence with respect to additigna, terrone? targets, which rs beme pursued 
aggressively 





Roly Land Foundation 
The Holy Land Foundation for Relief and Development (HLF) 1s stered as a 
nonprofit humanitarian organization that has conducted fund-r aising ac activites in 
the United States. la December 2001, the Department of Treasury's Office of 
orengn Assets Control designated HLF as a Specially Designated Terrorist (SDT) 
based on information that HLF provided matenal support to HAMAS, InfoCom, 
a computer company and Internet Service Provider closely associated with HUF, is 
being investigated for providing material support to terrorism and for making 
illegal shipments to state sponsors of terrorism in violation of the International, 
Emergency Economic Powers Act. As a result of a superceding indictment 
elated to the InfoCom investigation, the Dallas Division arrested four suspects 
who had been indicted on money laundenng, conspiracy, and terrorist support 
harges, Two additional suspecis were also indicted, however, they are in fugitive 
itus and remar at large. The four individuals arrested on these charges are 
expected to go to tnal in the immediate future. Tt is important to note that one of 
the fugitives is Mousa Marzook, allegedly a Deputy Head of the HAMAS 
Poittcal Bureau and an SDT 


£ ^ ryj 
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Jewish Defense League 
Investigation by the Los Angeles JTTF revealed that Irving Rubin and Earl Krugel 
were achve members of the Jewish Defense League, a known violent extremist 
Jewish Organization. A Cooperating Witness reported statements made by Rubin 
and Krugel indicating a plan to attack the Islamic Muslim Publio Affairs Council 
(IMPAC) office in Los Angeles or possibly the California office of United States 
Congressman Darrell issa, Statements made by Kruger indicated the motivation 
for the attack was to serve as a "wake up call" to the Musim Community, Rubus 
and Krugel were arrested by members of the Los Angeles JTTF for conspmag to 
bild and place an improvised explosive device at the IMPAC office. Irving Rubin 
committed suicide and Earl Kragel's charges are pending 


Ahmad Omar based Sheik 


ERAS 
Daniel Pearl, South Asia Bureau Chief for the Wal! Street Journal, was kidnaped 


in Pakistan on January 22, 2002, and subsequently murdered. The Newark Pield 


te 
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Office assumed the investigation due to the fact that the kidnaping was 
perpetrated via intemet email through the Dow Jones/Wall Street oun mal's 
computer server system, which is located in South Brunswick, New Jersey As a 
result of exceptional mternational law enforcement and USIC cooperation, Amad 
Omar Saeed Sherk, a Brinsh national and [siamic radical, was apprehended tu 

Pakistan m early February 2002. As a result of mvestigative work into the source 
of the e-mailed ransom commuracations, three other Pakistam nationals B Fahad 
Naseem, Salman Saqib, and Sheik Mohamed Adee! B were also apprehended. All 
four were charged and convicted EB Pakistam law for Pearl's abduction and 
murder. Sheik was sentenced to death by hanging and the other three were 
sentenced to 25 years in prison 








ha pes ant ii, 3 e os Vo wel 
On February 12 and 13, 2003, Joshua Caleb Sutter and Davis Wayne Hull, 


- 


Imperial Wizard of the "White Knights of the Ku Klux Klan, were arrested on a 
range of charges, including teaching or demonstrating the making and use of a 
destrüchwe device, selling legal weapons, and corruptly persuading a witness. 
with intent to mfluence his or her testimony. A search warrant on Phul's property 
uncovered fifteen firearms and some pipe bomb cor p nts. Sutter pled guilty to 
weapons violations and awaits sentencing Hull was mdicted by à Federal Graná 
Jury on May 13, 2003, and his matter is pending inal 


Earth Liberation Front 


Pursuant io an FBI invesbgation, John Wade, Adam Blackwell, and Aaron Linas 
pled guilty to maliciously damaging and destroying vehicies, houses, and other: 
property in the Richmond, Virginia area during the summer and fall o£ 2002. The 
incidents were claimed on behalf of the Earth Liberation Front, and total damages 
were esumated at approximately $225,000 On April 12, 2004, Aaron Linas was 
sentenced to 42 months in federal prison Wade and Blackwell await sentencing. 


5. By what qualitative aud quantitative criteria Is the FBI assessing its performance on 
intelligence reform? 


The FBI has launched a mult-pronged etfort to measure progress on intelligence 
eser. This effort includes the creation of binary metrics (has an objective been 
achieved or rot), qualitative measures that evaluate more abstract objecnves (such 
as customer sansfachon and employee morale), and quantitative measures that 
provide statistical evakuashon of performance (such as the number of mtelugence 
requirements met and the number of new sources develo loped). These metrics have 
been pubhshed in the FBI's "Strategic. Direction" Concept of Operations 
(CONOPS) as follows. 


lé 
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Intelheence Patsy Success Metrics. 


Production and dissemination of policy manual 

Elimination of redundant policy documents 
Production and dissemunation of standards for inteihgence products 
Percentage of mtelligence products meeting standar ds 
Inteihgence Process Metrics. 
Percentage of identified mtelhgence requirements met and gaps füled 
Establishment of a Field Intelligence Group (FIG) in every Held office 
Establishment of mtelligenoz-based targeting and source development in each 

office 

Development and maintenance of Intelligence Collection Capabt ity Bassin 
Development and maintenance of intelhgence analyst capability 


Threatebased Management Success Metrics. 





Production and maintenance of an FBI threat forecast 
Percentage of intelligence-driven investigations 
Workforce experience, education, and demographics 
Capability Matunty Model for Human Talent 
Capability Matunty Model for analytic tools 
Budget impact model for assigning value to sources 


Customer Service Metrics. 


Percentage of Products disseminated and at what classification level 
Percentage of products disseminated for each National Tate gence Prionty 
Analysis of customer feedback responses 


In addition to the above, the Ol and the Inspection Division have partnered to 
create an intelligence inspection checklist for use m inspechons The Inspection 
Division has also developed a series of performance metrics for ihe 
implementation of the intelligenos program in each mvesugative division. 
Finally, the FBI is considering the mclusion of two intelligence-related cntical 

elements in the performance reviews of each FRI agent. Those elements specify” 
the development of sources and the production of intelligence as en ical 
performance criteria for agents, 


6. Are you modeling vour intelligence reform efforts on the intelligence of the Central 
Intelligence Ageucy, Department of Defense, or some other U S. Intelligence Community 


entity? 
t5 
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The FBI has modeied us intelhgence program on the traditional intelligence cycle 
used by all intelhgence ennties, including those identified m the question. 
Through the intelligence cycle: 1) inielligence information pnorities are identified 
by natronal-levei officials, 2) collection strategies are developed by analysts and 
communicated to collectors, who then collect the information by developing 
apprdpriate sources, 3) the analysis and evaluation of collected inteiligence 15 
converted into intelligence products, 4) mtelligence products are disseminated to 
consumers inside and outside the FBI, and 5) a feedback mechanism is created to 
provide collectors, analysts, and collection strategy developers with consumers’ 
evaluations of intelligence value. To ensure uniform implementation of these 
processes, the OI led an FBI-wide effort in 2003 to develop and promulgate a 
CONOPS foreach process. In addition, the FBI has developed implementation 
plans for each CONOPS and implementation is tracked through a master 
schedule. 





While the intelligence cycle outlined above is common to all intelligence entities, 
the mechanisms by which it isumplemenied are tailored to the overall missions of 
the orgamzations in which they ars housed. The FB1 has implemented the 
intelligence cycle according to four core principles: 1) the independence of the 
intelligence requirements and collection management process from operations, 

2) the integration of intelligence production and operations, 3) the standardization 
of mtelligence processes and policy by the Ol and the execution of those processes 
and policies by all operational divisions, both at headquarters and in the feld, and 
4) the matrix management of all analysts, with performance rating accomplished 
by operational entities and performance review accomplished by intelligence 
entities to ensure that analyst standards are maintained 


7, Are you modeling your reform based on any other democratic country's interna) 
intelligence service? Have you looked at the structure and operation of other such 
systems? Tf so, what have you concluded? 


Response: 
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The FBI has studied extensively the mechanisms and structures according to 
which other democracies perform domestic mtelligence production, and has 
benefitted greatly from a number of independent analyses of these structures and 
processes, most notably from the recent stady by the RAND Corporation. We 
have reached three fundarnental conclusions from our review: 1) each domestic 
intelligence service is charged with performing the same basic functions, 2) each 


nation has burlt organizations io perform those functions that best leverage their 


larger federal and municipal structures, and 3) no organizational construct is 
zuffcientan and of itself to ehminate "seams" in mfórmation shanng. 
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In building our intelligence program, the FBI adopted the best practices of other 
democratic countries. For example, from the Briush Security Service (BSS, 
formerly MI-5) model, the FBI learned the benefits of a single focus on 
mtelligence source development, and adopted tus principle by creating a 

* — requirements and collechon management element independent from the FBI's 
investigative divisions and staffed by full-time targeting analysts who diva source 
development to fill entical intelligence gaps, The BSS relies heavily on municipal 
law enforcement entities to collect mtellgence information on its behalf In the 
United States, state, local, and tribal law enforcement entities are also powerful 
collectors of infonnation. The FBI has implemented ifs intelligence requirements 
and collection management processes in such a way that they leverage the 
capacity of our partners m law enforcement. 


FRI adopted the principle of integrating mvestieative 


law enforcement and intelligence operations, and implements this principle by 
integrating intelligence production elements in each of the FBI's operational 
divisions, both at headquarters andas the field. Following is a matax which 
identifies some of the domestic intelligence functions discussed in the RAND 
Corporation study (and used by the FBI to guide the development of our 
intelligence program) and indicates how these functions are implemented in the 
FBI 


From the French Service the 
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8. The FBI has attempted twice before in the past two decades to integrate its intelligence 
programs. The first initiative - also known as the Office of Intelligence - was an attempt by 
an FB] Deputy Director to integrate intelligence across the crimigal and national security 
programs of the FBI. It did not achieve its desired result, and the ürganization was later 
folded into the second initiative to integrate intelligence, and partíenlarly intelligence 
analysis, across the FBI - the formation of the Investigative Services Division (ISD). The 
{SD was disbanded shortly after the events of 9/11/2001. The Committee nnderstauds that 
the events of 9/11/2001 have dramatically increased the importance of leveraging 
intelligence to counter terrorism, but are there any systemic obstacles which were 
responsible for the failure of these past two efforts that remain in place and may 
undermine existinz efforts at intelligence reform? 


Response: 


TR 105€ ege svious attempts were not without concrete achievement and those who 

onceived them should be applauded for their efforts. Both of these efforts were 
bonc when various walls existed that prevented the implementation of the 
vision Legal wails prevented the integration of intelligence and eniminal tools to. 
combat terrorism. Cultural walls — real and perceived -- between the FBI, the 
CIA, and other members of the USIC were problematic. Operational walls ~- real 
and perceived -- between FSI efforts and Ml of our partners in state, local, and 
intemational law enforcement were also problematic. Today those walls are 
coming down, The USA PATRIOT Act, the revised Altomey General Guidelines, 
and a FISA Court of Review opinion tore down legal walls between mtellgence 
and law enforcement. We no jonger need to develop p parallel intelligence and 
criminal cases because of restrictions on information shanng.. We have also 
improved our relationship with the CTA and other members of the USIC and are 
integrated with them at every level. Within months, the FBI's CTD, the CIA's 
CTC, and the TTIC will collocate We have also strengthened our relationship 
with our state, local, and tribal law enforcement partners through the creation of 
&6 JTTFs. 


All of the above is not to say that we are yet where we want to be. The 
transformation of the FBI into a worttclass intelhgence organization will require 
strong leadership, hard work, patience, time, and resources. The FBI can provide 
the leadership, hard work, and pauenos. With the support of the Comunittes, the 
FBI ts confident that we will also have the time and resources we need to achieve 
the resuits the nation requires. 


m 
MA 


MISC. REO. #53 000004686 


ace e E A REUS Ne E- EU E yg PAS Cu e DX" 


INTELLIGENCE CY CLE 
1, The FBI is in the process of establishing a formal intelligence cycle. In testimony before 
the Senate Judiciary Committee on July 13, the Director stated that "... the intelligence 
cycle of requirements, collection, analysis, dissemination, and feedback always was and is 
now carried out..." across the EBI The Director also stated that the USA PATRIOT Act 
allowed the FBI"... io move from thinking about 'intelligence as a case’ to finding 
‘intelligence in the case’....". Do you see any contradictions or synergies between the 
gafhering of evidence to support legal proceedings and the collection of intelligence based 
on previously identified gaps in national intelligence to prevent terrorist attacks or 
espionage activities? 


We sec enormous synergies between the two activities and, because of the tearing 
down of the walls between enminal and intelligence activities, the FBI is now 
able reahze those synergies. First, National Intelligence Requirements are 
generated based on national security issues articulated by the President tough 
his advisors on National Secunty and Homeland Security. The FBI's law 
enforéement prioribes are fully represented tn those requirements and the 
Attorney General and the Director of the FBI parüoipate in quarterly National 
Secunty Council Principals’ Meetings devoted to the review of intelligence 
requirements. The new Attorney General Guidelines allow us to develop positive 
intelligence without first opening a case, and the FISA Court of Appeals ruling 
eliminated the need to open parallel enminal and intelligences cases and to 
mantan a wall between them For that reason, the CTD has adopted the Model 
Counterterrorism Investigative Strategy (MCTS) in which all cases are opened as 
intelligence. cases. 


The FBI brings enormous strengths to the development of sources and the analysis 
of information precisely because of its history of gathering evidence to support 
legal proceedings. Because itis accustomed to the need for witnesses and 
evidence that will withstand the serutmy of judicial review, the FBI brings a rigor 
and discipline to source development and analytic work that should serve as a 
model for the USIC. 


The need to protect classified information within court proceedings is sometimes 
viewed as a contradiction between evidence gathering and intelligence collection. 
The legal framework created by PISA and the Classified Information Procedures 
Act has for the past. 25 years successfully supported criminal prosecutions 
involving classified information. 


20 


MISC. REO. $53 000004687 


cs - CRE 6 E m i 


2. lf the starting point for the FBI's intelligence related activities remains a case, 
presumably opened due to some inimical activity, how is the FBI being proactive in 
preventine the next catastrophic terrorist attack? 


Résponse: 


The staring point for FBI intelligence actevities is the intelligence requirement, 
not the "case " Intelligence requirements directly reflect national security 
pnonties and serve as predication for the uu of cases designed to prevent 
acts of harm to the nation. In the FBI, the "case" is the vehicle for organizing 

vestigative work Because the starting pomt for the FBI intelligence program is 
án aee nce requirement, we ensure that FBI cases are opened to develop the 
information we must obtain to prevent not uuly terrorist activities, but also hostile 
intelligence operations, cyber attacks, and criminal activities that would harm our 
nation. 


3. Prior to the creation of the Office of Intelligence in late 2001, could you explain how the 
intelligence cycle worked within the FBI? For example, how would a tasking for domestic 
intelligence collection from another member of the U.S. Intelligence Community be 
communicated across the FRI and then a response back to requesting party? 


Response: 
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In late 2001, an Ol was created in CTD. This represented Stage One of the FBI's 
efforts to develop an enterprise-wide intelhgence program, and focused largely on 
aligning intelligence production efforts with national priorities and deve loping 
standards for analyst traming and performance. Stage Two of our efforts focused 
on creating a robust analytic capability in CTD with the help of 25 analysts 
detailed to the FBI from the CIA. Stage Three of our efforts was the creation of | 
an FBI-wide inteligence program to ensure uniform implementation of the 
intelligence cycle across al investigative programs. 


Prior to the creation of the Ol in early 2003, the FBI's intelligence cycle was 
implemented in each of the mvestigative programs. Requests from other agencies 
went directly to those investigative programs, often facihtated by liaison officers 
at each organization s respective headquarters. Except where taskme was 
associated with a specific operational lead to one or more field offices, there wa 

no mechanism to ensure a response was provided to the requesting party 
Simuarly, there was no single center responsible for ensunng that other mterested 
parties knew or had access to the response. Mast importantly, the requests for 
information rarely crossed investigative programs and, as à consequence, the full 


breadth of FBI collection assets was not mobilized m response to the request. 
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4. How did the creation of the Office of Intelligence change this process? 
Response: 


The OH, created m 2003, leveraged the best practices of individual investigative 
divisions to formulate a formal and well-defined process for managing 
intelligence requirements and collection which is common to ail FB] programs. 
y e have instituted a formal request for information process that ensures that all 
requestors of Information receive responses üncladimg negative responses) and are 
updated on efforts to meet their needs throughout the process. We execute that 
process through our Intelligence Requirements and Collection Management Unt 
(IRCMUS which provides a single pomt of entry for all inf ormation requests. The 
TREMU represents the FBLon the DCPs National Intelligence Collection Board 
and ensures that USIC taskings are passed to FBI field offices through the FIGs. 
The performance of FiGs is measured by the extent to which they have heen able 
to full! intelligence requirements. 


5. The Office of Intelligeuce's Intelligence Requirements aud Collection Management Unit 
is responsible for establishing a system for the development and fulfillment of intelligence 
collection requirements. What progress had been made in this area? 


Response: 


We have made significant progress in this area. The IRCMU was established in 
June 2003. Since its creation, the FBI has 


è Developed a CONOPS for Intelligence Requirements and Collection 
Management. 


* Developed the frst FBI requirements documents, including one set for 
intemational terrensm and three seis for crimimal issues (alien smuggling, 
international organized crime, and publie corruption). 


e Developed and published the FBT Intelligence Collection and Reporting 
Cuidance Manual. j 


e Developed and published an FBI Intelligence Requirements and Collection 
Management Process Handbook. 


e Developed and delivered Intelligence Requirements and Collection 
Management Tramong for all FBI execubves, new agents, and new analysts 


e Completed a collection baseline that allows the FBI to determme where we 
have intelligence gaps with respect to critical national secunty needs. 
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6. What qualitative and quantitative criteria are being used to assess performance in this 
area? 


Response: 


The PRI outlined its performance metros for the overall intelligence program, 
including the IRCM process, in some detail in our answer io # 5 of the "General" 
questions. Please see that response. 


, 7. How are Internally generated intelligence collection requirements prioritized against 
those which may come to the FBI from other US. Intelligence Community members? 


The FB] requirements process uses a singie priontization scheme regardless of the 
ongmator of the requirement, That scheme is the DCI's National Intelligence 
Prionties Framework (NIPF). 


8. What process does the FBI use to develop its priority intelligence collection 
requirements? 


Response: 


fhe FBI intelligence requirements process begins with the NIPF. The FBI then 
overlays on the NIPF the investigative priorities assigned to it m order to ensure 
that unteliigence requirements for which the FBI is both the primary intelligence 
agency and the lead operational entity ars adequately reflected in our collection 
taskings. Using the IRCM process described above, intelligence collection 
strategies and collection taskings are then issued to all operational divisions at 
headquarters and in the field. Full-time targeting analysts in IRCMU are 
responsible for ensunog targeling strategies are developed and executed to All 
intelligence gaps 


9. Are FBI collection requirements consistent with U.S. Intelligence Community collection 
requirements? 


Response: 


gary 


Yes, PBI collection requirements are based on the DCUs NIPF. 


10. In terms of performance evahrations, what specific measures are in place that provide 
(positive, noa-inspection-related) incentives for Special Agent intelligence collectors ta 
fulfill intelligence collection requirements from both the FBI and the U.S, Intelligence 


Community? 
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The FBI s considering adding two cortical elements to the evaluation of Special 
Agents” performance. The first focuses on the development of intelligence 
sources and the second on the production of intelligence 


11, What specific measures bas the FRI taken to improve its ability to recrait human assets 
who may prove beneficial to preventing acts of terrorism directed agaiust the United 
States? 


Response: 


Since September 2001, the FBI has increased international terrorism sources by 
over 60% and domestic terrorism sources by more than 30%. We have achieved 
this success through a number of efforts, including increased trauung efforts such 
as Operation Tnpwire, which is designed to increase our intelligence base agmnst 
critical threats. Beginning this year, we will send Special Agent collectors to the 
CIA's 32-week case agent training course In addition, Munan source 
development modules tram the CLA course will be added to our training programs 
this year 





ANALYSIS AND THE INTELLIGENCE CYCLE 





1. How does the FBI "know what it doesn't kaow;" in other words, what process is the FBI 
using to determine its intelligence gaps? 


Response: 


The FBI process for determining intelligence gaps begins with tbe NIPF, which 
systematizes, at a high level, the totality of United States national intelligence 
requirements. The FBI applies its capability to collect information on threats to 
these requirements statements m order to identify intelligence gaps. These 
intelligence gaps are then used by the FBI's IRCMU to drive the cci tof 
targeting and collection strategies. Once strategies are developed, collec 

taskings are assigned to appropriate field offices Targeting and c MR 
strategies are dev eloped by the IRCMU with analysis embedded in operational 
divisions both at headquarters and in the field. 


2. Have intelligence "baseline" studies been conducted to determine what the FBI's 
intelligence universe looks like? 


Response: 
In February 2004, the FBI completed an intelligence collection baselme, which we 
call the mtelhgence capabilities survey This survey allowed us to captare im a 
24 
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single database the sum total of intelhgence collection resources we can brag to 
bear ona grven threat. 


On the analysis side, we have baselined our knowledge of a number of terrorist 
groups in the United States, the posture of key intelligence se ervices in the United 
States, and a number of organized crime organizations and gangs in the United 
States. 


3. Which categories of FBI employees are responsible for identifying intelligence gaps? 


Response: 


All FBI employees (agents, analysts, language analysts, mm specialists) 
identify mtelligence gaps fn the course of performing their work, The OUs 
IRCMU is responsible for managing the FBI's efforts to au these gaps. The 
IRCMU carries out that responsibility through its dedicated targeüng analysts, 
whose full-time job is to “know what we know” and "know what we must know" 
to prevent harm to our nation. Together with analysts and agents in investigative. 
divisions, collection strategies are developed to fill intelligence gaps Tiis same 
process is carried out in the field through the FIGs, 


4. How does the FBI define "strategic" analysis, and how does it differ from the activities 
of tactical analysis, and the activities of reports officers? 


Response: 


Strategic analysis is the ability to step back and look broadly at trends. Analysis 
at this level involves an aggregation of information. Current intelligence ts | 
natrower in scope and 1s comprised of the individual peces of information that 
are analyzed in the strategic analysis process. Reports officers have a 
responsibility to report current inteligente ina way that protects sources and 
methods, but gets current intelligence to the consumer on a timely basis 


5. Given demands for close case analytical support and the need to rapidly disseminate 
intelligence to various consumers, do tactical analysts ín the field have the time and/or the 
appropriate analytical skill sets to dedicate to intelligence gap identification, arguably a 
high-level analytical function? 


Response: 
Analysts in the field primanly deal with current intelhigence denved from held 
mivestigative activities: Thew mission 18 entical to supplymg intelligence 
information that is evaluated for gaps, asi through an independent analytic 


process that is a collaborative effort between FBIHO analytical components and 
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the Of's IRCMU. The gap analysis requires us to step back fom the day-to-day 


flow of current inteibgence and identify intelligence colischon requirements to 


satisfy the gaps. Through collection taskings, the FB] influences the collection of 


` 


current intelligence to contrae the intelligence cycle. 





6. Are strategically oriented intelligence analysts at Headquarters assuming the greatest 
responsibility for the identification of intelligence gaps? If so, have their performance 
evaluations been adjusted to reflect this important analytical function? 


Response: 


Yes, FBIHQ mtelligence analysts assume the greatest responsibility for the 
identificatica of intelligence gaps, receiving valuable input from field intelligence. 
analysts The current performance plans for intel genos analyst positions, along 
with detailed supplemental work role guidance issued throughout the FB] in 
December 2003, do reflect this important analytic funchon. 


7. How are demands for strategic intelligence analysis at FBI Headquarters being balanced i 
with the need to provide analytical support to FBI executives (briefings etc)? 


Response: 


The intelligence process 15 built on the provision of intelligence and the resuits of 
inteligence analysis to consumers who need it for operational, strategic, and 
pohcy decision-making. Analytic support to FB] executives, in the form of oral 
briefings and written products, isa natural outgrowth of ongoing current and 
finished intelligence reporting, and we consider it a valuable part of the 
intelligence cycle and its analytic processes. These requirements are not mutually 
exclusive, but are properly parts of balanced support for FBI Executives, which 
includes the provision of information regarding the strategic analyho process to 
improve decision-making 


The Ol's Strategic Analysis Unit (SAU) ts responsible for ensuring that strategic 
analysis phorites set by the Ol are executed by the strategic analysis elements of 
each of the operational divisions. Each FBI operational division has a robust 
strategic analytic element that carries ont analyses and production according to 
priorities set by the Ol each morning al an FBI-wide intelligence production 

necting Those priorihes emanate from both the DCPs NIPF and current 
uteligenee that requires that it be put in context to be fully understood The SAU 
produces a daily current intelligence summary and ensures that the imbedded 
strategic analytic units in the operational divisions produce strategic intelligence, 
but it does not itself produce strategic intelligence. We have recently embarked 
on work related to a senes of “intelligence campal ans” amed al ensunmg 
continued focus on our strategic analysis effort. 
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8. The Committee has provided the FBI with funding for approximately 900 new analysts 
positions this year. Historically, the FBI has had problems with retention of analysts, 
particularly whea it attempts to quickly absorb large numbers of analysts. How do you 
plan on hiring so many new analysis? 


Response: 


The FBI has an aggressive recruitment plan, which includes a marketing 
campaign, career fairs, and a soon-to-be-implemented quick hire system ta 
expedite the application process Applications will be reviewed by career boards 
at FBIHQ and in the Field Offices on a bi-weekly basis. To date, more than 8,000 
apphcations have been received. Through a substantial dedication of resources 
and process oversight at the executive level, the FB] is committed to absorbing 
tns large number of new analyst hires As of April 7, 2004, 5061 minimally 
qualified candidates had been referred to the 56 field offices for selection to fill 
authorized vacancies through the career board process. FBIHQ divisions have 
besa provided 1210 minimally qualified candidates from which they may select 
candidates for their authorized positions 


9. How many reports officers are currently on-board, and where are they located? 


Response: 


The FBI has allocated 124 Intelligence Analyste, 44 at HQ and 80 in the field, to 
perform the reports officer function Twenty-three reports officers are currently 
on-board in the field offices, and 17 more are in the hackzround investigation 
process. The remaining field positions will be filed from applicants to the FBI's. 
current Intelligence Analyst posting. 


10, A one-year infusion of analysts - constituting a 75 percent increase over the current 
level of analysts - is significant. Please provide a description of your concrete plans for how 
these analysts will be allocated between headquarters and the field? 


Response: 


; The FBI plans to utilize the new analyst positions m each program as follows: 


Counterterronsm: All: 134 to the Seid and 277 at headquarters 
Countenntelipence. 178: 105 to the field and 73 at headquarters 


Crmmal: 214: 17010 the field and 44 at headquarters 
Cyber ld; — 7tothe held and 7 at headquarters 


Tota] 817 
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1i. How will these analysts will be utilized {counterterrorism counterintelligence, 
criminal, cyber) both in the field and at headquarters? What is the allocation of these new 
analysis between and all-source, case support, and reports fauctions? 


The mteliigeuce analyst position consists of three work roles: reports officer, 
operations specialist, and ail-source analyst. Another position, that of financial 
analyst, may involve mteihgence or other analysis. Currently, the breakdown is as 


follows 


Counterterronam: 196 Operations Soscialiste 
65. Reports Officers 
149 All-Source Analysts 


Counterntelhgence: 132 Operations Specialists 
46 All-Source Analysts 


175 Al-Source Analvats 
9 Reports Officers 
30 Financial Analysts 


Criminal: 


Cyber. 14 All-Source Analysts 


12. What training resources are in place to ensure all these new analysts receive 
appropriate and timelv intelligence analysis training? 


Response: 


Aii Intelligence Analysis new to the FBI or new to the analyst position attend the 
CAS Basie Intelligence Analyst (BLA) course. Tins course is currently being 
revised to incorporate a number of core mielhgence learning objectives identified 
by the Ol. The FBI has engaged a number of subject matter experts in intelligence 
analytic tradecraft to work in a collaborative effort with the Ol and the Training 
and Development Division to make a number of important course improvements 
im the Basic Analyst Course, which will he renamed the Analytic Cadre 
Educational Strategy (ACES D. As a result of Congressional funding to support 
PRI Intelligence Analysis Training, a number of fundamental intelligence analysis 
traming modules that are now used within the USIC will be adopted for inclusion 
in FBI analyst trang. The FBI's strategy includes the use of experienced 
contractors to help identify relevant courses, subject matter experts for training 
delivery, and a "train the trainer" approach to help build a cadre of effective 
intelligence analysis mstructors withun the FBI. 
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FBI Intelligence Analysts will also have developmental opportunities throughout 
their careers, Including temporary assignments in different functional areas ard 
supplemental traimag offered throughout the USIC, inchidín © training offered by 
other iaw enforcement agencies, private vendors, and academic insitutions. The 
Human Talent for Intelhgence Production CONGPS articulates the plans for 
career progression in thres tracks (generalist, specialist, and manager), and 
establishes a Sramework for Intelligence Analyst career development and traming 
The Human Talent Development pian also includes the development of a higher- 
level specialized intelligence analysis course known as ACES IL which will 
enhance the knowledge, skills, and abilities of the intelligence analyst workforce. 


13. It has come to the Committee's attention that the FBI no longer requires new analysts 
to have a bachelor’s degree from an accredited college or university. While such a degree 
may not guarantee analytical success, some would say it demonstrates a commitment to 
learning, familiarity with research and analytical methods, and writing skills. What was 
the rationale tor eliminating this requirement? 





Response: 


The FBI will waive the college degree requirement for those who have 

intelligence expsnence. We made thai decision because we did not want to 
artificrally lirmt our ability to hire experienced former military or law enforcement 
intelligence professionals who could bring great benefit to our intelligence 
program, but might not possess a college degree. We at the FBI agree that a 
college degree bnngs much to our intelligence program; we also beheve 

intel gence experience brings much to our intelligence program. Our introduction 
ofthe watver was designed to ensure we could balance experience with education. 
We have hued approximately 75 analysts in this fiscal year, and have not yet 
exercised 3 waiver, 


14. Does the elimination of this requirement exacerbate the FBI's ongoing analytical legacy 
problem across field offices, where many individuals not having a bachelor degree were 
promoted into analytical positions? 


Response: 


No, the degree waiver is only for those individuals who have specific intelligence 
experience and expertise. Ali new analysts will have either a degree or 
demonstrated mtellizence sxpenence, and many new hires may have both The 
new analysts will work with the FBI's expenenced analytical! cadre, creating a 
formidable team working to fulfill the FBPs mission With respect to the field 
office infelhgence analyst workforce, the FBI is in à unique position, in 
comparison with the rest of the USIC, to attract those highly qualified candidates 


SN 


throughout the country who do not wish to move to the Washington, D.C. 
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metropohtan area to take a position in a USIC agency. This advantage has been 
confirmed by a review of the thousands of applications received thus far from 
candidates for field office positions. Recent changes to FBI personnel policy also 
now enable FBI field offices to hire or promote qualified intelligence analysts to 
the GS-14 non-supervisory pay grade, as has been possible for FBINO intelligence 
analysis. 


15. If your competitors for human resources within the US. Intelligence Community are 
requiring graduate degrees for intelligence analysts, will they not be better positioned to 
attract and retaíu a higher caliber of analyst? 


Response: 


No, all new analysts will either have a degree or demonstrated intelli gence 
experience, and many new hires may have both. As discussed further in the 
previous response, the FBI 1s in & unique position, in comparison with the rest of 
the USIC, to attract those highly qualified candidates throughout the country wha 
do not wish to move to the Washington, D C. metropolitan area to take a position 
ina USIC agency. 


The FBT is seeking ways, through pay flexibilies and other means, to recruit and 
retain world-class professionals as Intelligence Analysts. 


16. A recent FBI intelligence analyst job posting instructed candidates to "... identify the 
program area of interest. however, this does not guarantee placement in the particular 
program..." The program areas of interest are counterintelligence (CD), counterterrorism 
(CT), criminal and cyber. És the FBI recruiting as intelligence analyst generalists, 
specialists, or both? 


Response: 


Our intelligence analyst development program calls for all intelligence analysts 
Joining the FBI to learn the basics of all analytic work roles: operations specialist, 
reports officer, and all-source analyst. At the mtermeduate level, analysts will 
pursue one of three career tracks: 1) continued deliberate extension of general 
knowledge, 2) deliberate deepening of specific target and work role expertise; and 
3) deliberate development of expertiss in managing the work of intelligence 
analysts. This approach allows for the development of target experts, work role 
experts, and managerial experts, all of which ars needed for our analyst program 
to be successful Our analysts must be deployed agast our nation's intelligence 
prionnes. That requires us to balance the development of experts and the 
Gevelopment of utility players who can be deployed against emerging threats. The 
Ol has the responsibility to ensure that the night skill and expertise balance exists 
i its analytic workforce, and we believe our development program provides 


Q 
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maximum flexibility id reaching and maintaining this balance. Because the 
analyst development program first teaches the basic tools of intelligense analysis, 
analysts will be able to apply these tools to new targets quickly and effectively, 
allowing us to méuntain this balance as the threat to our national security evolves. 
17. What does the FBI believe the appropriate mix of analytical specialists and generalists 
may be? 


Response: 


Ai FBIHQ, approximately 60% of the intelligence analysis should be specialists 
and approximately 40% generalists. in the field offices, the mix of specialists and 
generalists is highly dependent on the threat environment, and the size, staffing, 
and organizanonal structure of the particular field office. The need for specialists 
and Senerahsts varies depending on she functions that each entity within the 
organization performs. Program managers routinely reassess each organizational! 
functional area and redirect resources as needed Recruitment efforts may be 
adjusted tu reflect changes in managers’ assessments of program needs and the 
threat environment. 


18. Does the FRI believe that intelligence analysis are interchangeable, that is, that a 
criminal intelligence analyst working organized crime can perform the same expert 
analytical function at the same level as a counterterrorism analyst working Al Qaeda? 


Response: 


No. As discussed further in response ta Question 16, the FBI's intelligence 
analyst development program calls for all intelligence analysts joining the FBI to 
leam the basics of all analytic work roles {operations specialist, reports officer, 
and all-source analyst) and to pursue one of three career tracks at the intermediate 
level (continued deliberate extension of general knowledge, deliberate deepening 
of specific target and work role expertise, and deliberate development of expertise 
in managing the work of intelligence analysts) Please see our answer above for 
additional details concerrung our analyst development program. 


19. Does the FB] believe that its Special Agents are tts best analysts? 

Response: 
Roth Agents and support analysts mherently perform analysis as they work to 
accomplish the FBI's mission. Agents and analysts routinely work in tandem, 
each performing fictions m the areas for which they are trained and have 
developed expertise. Asabysisos a skill that must be demonstrated by both 


positions: The mvestigative work performed by Special Agents inberently 
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meludes analysis of the strength of evidence, the identification of logical 
immveshgauve leads, ~ many other acuv ies that require the evaluation of the 
information collected 


20. How many analysts has the FBI detailed to the Terrorist Threat Integration Center 
(EEC)? 


Of the 65 FBI personnel allocated to TTIC, most are analysis The breakout 
falles 
io LOWES. 


41 Inielhgence Analysts 

1 Supervisory Technical Information Spe cial 
14 Techrucal information Specialists 

4 Special Agents 

5- Other Support Personnel 


m 
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2i. Whatis the division of labor between FRI counterterrorism analysts assigned to TTIC 
and FBI counterterrorism analysts who remain at FB] Headquarters? 


Response: 


The FBI's CTD has three core responsibilities: 1) managing CT operations within 
the Unuted States to detect, disrupt, and prevent terrorist activities; 2) conducting 
analysis to support its own operations, and 3) producing and disseminating 
intelligence reports resulting from these operations to all federal CT elements and, 
as appropriate, state and local law enforcement offictals, 


FBI analysts within CTD exploit available intelligence and information to dnve 
FBI CT operations that will lead to the identification and disruption of terrorist 
activities. The FB] is also responsible for analyzing law enforcement and 
investigative wformauon which has been detemaned to have no connection to 
intemational terrorism (such as mformation exclusively about nen-Nazi 


"lY 


orgamzativos or animal “liberation” groups). 


TTIC has the authority to tack collection and analysis from USIC agencies, 
including the FBI. The analytic work conducted at TTIC creates products that 
inform each of TTIC's partner elements, as well as other federal departments and 
agencies, as appropriate These products are developed collaboratively among ell 
of these elements, principally through their assignees physically lacated at the 
TTIC facility, bat also working close y with their headquarters elements. 


23. For how long are analysts detailed to the TTIC? 


Response: 


tad 
to 
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Assignments fo TTIC are generally two years in length; however, ether shorter or 
ionger tours can be negotiated between FBl'and the Director of TEIG. 


23. Are there any analytical redundancies or planned competitive analyses being 
conducted by these two groups? If so, please explain the plan to ensure that potentially 
competing analytical conclusions are briefed to consumers. 


Response: 


"Competitive analysis" has for decades been à comerstone of United States 
intelligence analytic efforts and the best way to guarantee that decision makers get 
the most accurate possible overall picture. We are stili an the process of building a 
program that will permit this level of analysis 


24, How do FBI eounterterrorism analysts assigned to the TTIC interact with 
counterterrorism professionals within the Director of Central Iutelligence's (DCD 
Counterterrorism Center? 


Response: 


While TTIC has primary responsibility for terrorism threat analysis, the CTC has 
primary responsibility for ail other international terrorism analysis (e.g. , terrorism. 
that does not impact on U.S. interests overseas? For example, CTC anal ysis 
might focus on terrorist weapons programs, tactics, and logistics capabilities; 
terronsm financing; and worldwide terrorism cooperation. To the extent these 
issues require coordination with T TIC, FBI analysts assigned to TTIC will interact 
with the appropriate CTC analysts. 


25. Does the FBI have any analysts assigned to work with the Department of Homeland 
Security's (DHS) Information Analysis and Infrastructure Protection (LATP) Division? 


Response: 


There are no FBI intelligence analysts physically assigned to the DHS Infornauon 
Analysis and Infrastructure Protection (IA/IP) Division. FBI intelligence analysts 
do, however, coordimate and exchange mformation with DES LAAP analysts daily 
in terronsm-related matters of mutual interest. 


26. With respect to the GS-132 (intelligence analyst) series of employee, what is the FBI's 
historical (going back 15 years) attrition rates? Are exit interviews conducted with 
intelligence analysts who depart the FBI? If so, what do the aggregate results of these 
interviews indicate regarding the reasons FBI analysts depart? 


Response: 
33 
Be Kod 000004700 


Specific exit mterviews are nal conducted with intelligence analysts who depart 
the FRI, However, exit interviews and questionnaires are provided to all 
employees separating from the FBL Some employees provide reasons for their 
departures; others do not. This information is not required The table below 
provides available attribon information for the intelligence analyst position with 
respect to the past 16 years, with Fiscal Year 2004 figures through 3/24/04 
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FBI Intelligence Analyst Statistics 
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The information below for the years 2001 to the present depicts the reasons for 
separation, when available. 
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46 wntelligence analysts were hired in FY 2001; 26 separated from the FBI in FY 
2001. Of those 26 employees: 
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6E intelhgence analysts obtamed other positions within the FBI and separated 
from the 0132 (Intelligence) Senes in FY 2001. 


[t3 
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98 intelligence analysts were hared m FY 2002, 42 separated from the FBI in PY 
2002. Of those 42 employees” 


16 (38%) Retred 
P (2495) Accepted employment with ancther government agency 
(2%) Removed from the FRI 
js E E%) Separated for other reasons (personal, full-time parent, health, etc.) 


61 inielhgence analysts obtained other positions within the FB] and separated 
from the 0132 > atelie sence) Senes in FY 2002. 


205 10 Helle gence analysis were hired in FY 2003, 67 separated from the F Blin FY 
2003 Of those 67 employers 


& 


15 (22%) Retired 
27 (40%) Accepted employment with another government agency 
416%) Removed from the FBI 
3 (5%) Passed away 
i (2%) Accepted into New Agents Class 
17 (25%) Separated for other reasons (personal, full-time parent, health, etc.) 


14 intelligence analysts were migrated to DHS m March of 2003 pursuant to 
FBYVDHS reorganization. — 


4] intelligence analysts obtained other positions within the FBI and separated 
from the 0132 (Intelligence) Series m FY 2003. 


POMS - Present (3/24/04) 








78 intelligence analysts were hired from 10/1/03 to present, 34 separated from the 
FBI from 10/1/03 io present. Of those 34 employees: 


412%) Retred 
10 (29%) Separated for other reasons (personal, full-time parent, health, etc.) 
19 (5694). Accepted employment with another government agency 

1(3%) Removed from the FBI 
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2 ne elligence analysts have chtained other positions within the PBI and have 
separated from the 0132 (Intelligence) Senes from 10/1/03 to present. 





27. What percentage of FBI intelligence assets (operational assets, efc.) are vetted 
analytically? What role do FB] intelligence analysts and Special Agents play in the asset 
vetting process? Who makes the final judgment on the credibility aud reliability of an 
intelligence asset? How are dilferences (regarding source reliability and credibility) 
between case agenis who recruited a source and intelligence analysts who assess 
information reported from a source resolved? 


Respouse: 


Currently human source validation processes vary among the major inves ügabve 
programs. For example, Cl program assets undergo à formal validation process 
modeled largely on the CIA’s processes Criminal informants and cooperating 
witnesses are subjected to suitability and relrability assessments pursuant to 
Resolution 18 of the Attorney General Guidelines (to include review by the 
Criminal Informant Review Commuttes) 


We are now formulating a standard set of processes and procedures across FBI 
programs for human source validation and vetting. It will build on best practices 
in our four investigative programs and establish a single set of standards and 
protocols for all FBI programs. The administration of that process will be 
transferred to the OI for execution and monitoring once the standards and 
protocols are complete. The Office of Inspections is leading the EBlI-wide effort 
to formulate the asset vetting and váhdation standards and protocols. 





28. With respect to the Trilogy Project, are analysts now able to text search (with 
appropriate security controls) all communications into E BI Headquarters fram FBI field 
offices and the U.S. Intelligence Community? 


i iysts can conduct text searches currently using the Automated Case Support 
(ACS) system, but the process 18 cumbersome. The Virtual Case File (VCP) 
technolo gy will enhance analysts’ ability to search both structured (fielded/tagged) 
and unstructured (free text) data with appropriate access controls. 


29. Has FBI Headquarters conducted inspections of its field offices to determine if they are 
uploading investigative/operational communications in a timely aud accurate mauner for 
analytical exploitation? Ifso, what are the resulis of those inspections, with respect ta this 
issue? 


Response: 


xr 
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The Inspection Division conducted comprehensive reviews of the operations of 
twenty held divisions over the past year These reviews did not identify 
significant deficiencies with respect to the entry of investigative mfonnation into 
the PRI's system of records. Deficieucies were noted with respect to failures to 


tmely record i accomplishments | for statistical purposes 


Routine file reviews by field office supervisory personne! are another way of 
determining whether standard records management procedures are being followed 
by mdividual agents and analysts. 


The Information Resources Division provides the Records Management Division 
(RMD) with a statistical chart which mdicates the menber of documents added to 
ACS and the number of these documents whose text has also been uploaded. 
Most offices are uploading between SO end. 100 percent of the document types thal 
are capable of being uploaded. This chart is aval to the field so that fieid 
managers can monitor their performance in addition to reiterating the importance 
of uploading documents into ACS While this report only tracks those documents 
which have been added to ACS as senals, and does not track documents which 
remain on FRI employees! computers, on disks, and m desk drawers, RMD is 
currently working on a new Records Pohey Manual which, when completed, wil 
be issued and available to all employees. This manual will reiterate the 
importance of managing materials on mdividual computer drives and otherwise 
under individual employee control, and of uploading these materials into the 
Bureau's systems of records. 


INTELLIGENCE DISSEMINATION AND THE INTELLIGENCE CYCLE 








1. In instances in which the U.S, Intelligence Community develops information indicating a 
terrorist threat to U.S. infrastructure, how is that information shared with the FRI? What 
is the division of labor between the FBI and DHS with respect te notification of State and 
local law enforcement and private sector owners of U.S. critical national infrastrueture? 


USIC terrorist threai information ts shared with the FBI i a variety of ways: 
jomtly staffed offices and projects, electronically transmitted and hard copy 

intelligence reparts and other products, and personal contact between intelligence 
counterparts. 


The FBI has responsibility for conununicating terrorism information to state and 
local law enforcement organizations by using NLETS or by communicating 
through the NITTF to local ITTFs DHS is responsible for communicating 
terrorism information to al! state and local officials and appropriate private se 
orgemzations outside the law enforcement domam. The FBI and DHS issue Joint 
threat warnings i 


Scror 
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2. How does the interaction between the FBI and DES take place with respect to such 


iuformation? 


Response: 


Interaction between the FBI and DHS takes place on a number of levels DHS 
representativos attend the FBI's Dai y Inteligence Production Board meetings; 
DHS members are part of the NTTTF at FBIHO: intelligeuce components at 
FBIHO are in daily contact with DHS intelligence components to coordinate 
intelligence reporting and analysis; and DHS component organizations have 
substantial representation mthe JTTFs in the field. 








e been developed specifically to convey threat information 


The Emergent Threat Intelligence/Information System. The Emergent Threat 
Intelligence/InForznation system was developed primarily asa means of 
Eg cs between the DHS Homeland Security Operations Center and the 
Pa CT Watch in our SIOC This interface occurs via several secure mediums, 
hend telephone, facsimple transmission, and Secret Intemet Protocol Router 
Network (SIPRNET) or Joint Worldwide Intelligence Communications System 
(JWICS) computer transmision, 1t is anticipated that future communication will 
be processed (as allowed) via the JRISS (law enforcement sensitive) computer 
system. Examples of the types of mteiligence requests made through this system 
include name checks of persons of interest on incoming flights, major 
developments m ongoing operations or investigations, and short notice write-ins 
or bomb threats. A commurmcation is deemed "emergent threat" when the request 
is time sensitive and a routine or formal method of interagency notification would 
delay the transmission of potentially critical information. 





information request Dem been established to address specific ongoing | or “longsti 
intelligence or information requests, Utilizing this medium, DHS submits a 
detailed request for specific information to the FBI CTD's Executive Staff at 
FBIHQ After the mformation 15 properly vetted for case sensitive content, a 
response 15 provided to DHS via the sare cable transmission medium. 


Route Intelligence or Information. Routine intelligence or information is 





disseminated to DHS, the USIC, the law enforcement community, and ultimately 
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the private sector via mtelligence bulletins that are issued weekly and as 

necessary The FBI currently ts working with DHS to provide a unified 
dissemination system. to prevent conflicting or duplicative messages An example 
of this jaunt effort is FBIHQ's Terronsm Watch and Warning Umt, which provides 
a draft of the Weekly Intelligence Bulletin to DHS for input prior to publication, 
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3. How many State and local law enforcement officers have been granted Secret or Top 
Secret security clearances? 


Response: 


Between September 11, 2001 and February 19, 2004, the Security Division 
received and processed the following. 


State and Local Law Enforcement Executives: 





* 2,707 security clearance requests received 
. 2,331 successfully processed 
. 269 open cases currently pending 


Joni Terrorism Task Force Members: 


. 1,589 requests for Top Secret Clearance 
. 1,414 successtully processed 
. 175 open cases currently pending 


4. What information thresholds and procedures do FBI Joint Terrorism Task Forces 
(JTTE s) use when considering whether inielligeuce should be shared with State and local 
law enforcement officials, as well as with private sector Information Sharing and 
Analytical Centers (SACs)? Do any written guidelines outlining the thresholds and 
procedures for dissemination of (sensitive but unclassified and classified) intelligence to 
state and local law enforcement exist? 


In March 2004, FBTHQ issued written procedural guidance to all feld offices 
regarding intelligence reporting and dissemination with respect to ITTFs. This 
guidance specifically addressed the reistionship between the FIG and the ITTF in 
each field office. l 


The FIG will deploy to the JTTF a combination of the following personne? 
depending on the structures of the organizations involved, one or more 
intelligence analysts in a Reports Officer role, one or more Special Agents, and/or 
à cleared, permanent FIG task force officer or analyst with a dedicated assignment 
of reporting raw, collected intelligence which meets specified reporting 
thresholds, This information is communicated to CTD's TRRS for disserunation 
to FRI mtelligence customers by CTD via an Intelligence Information Report 
(HR). FBIHQ intelligence analysts commumente and coordmate daily with DHS. 
DHS, whose component agencies participate in the ¿TTF anc/or FIG, is 
responsible for communicate terrorism formation to all state and local 
officials and appropriate private sector organizations outside the law enforcement 
domain. 


40 


MISC. REQ. #53 000004707 


The FRI has drafted an Intelligence Inssenumation Policy Manual, which has been 
provided to the Department of Justice forreview The draft manual addresses 
comprehensive intelligence dissemination policy issues, such as disserunation of 
classified and unciassified uttelligence to a broad range of customers, including 
state, local, and tribal law enforcement officials 


The FBI is also m the final stages of preparing an Intelligence Requirements and 
Collection Management Handbook which addresses reporting thresholds for state, 
local, and tribal law enforcement disseminahon. 


5. Has the FBI conducted consumer surveys with State and local law enforcement 
personnel to determine their satisfaction with the FBI's dissemination? If so, what are the 
results? 


Response: 


The FBI is currently constructing a web-based customer survey for state and local 
law enforcement agencies to leam of their satisfaction level with information and 
ielhgence disseminated by the FBI, This survey has not yet been distributed, but 
is expected to be in the near future. This feedback report will be part of future 
field office pre-inspections to determune satisfaction levels. 


OLEC reports that, during its two-year existence, the number of complaint calls 
from law enforcement personnel regarding information sharing by the FBI has 
steadily decreased. When OLEC personnel attend meetings with law 
enforcement, they are often told that there is an increase in cooperation and 
information sharmg by the FBI. The Director's Law Enforcement Advisory 
Group also reports that it's members have expenenced a significant improvement 
m the level of cooperation and information sharing between the FBI and state and 
local law enforcement. 


ORGANIZATIONAL CHANGES 


The Committee recognizes that the FBI has made substantial organizational changes as it 
reformas its approach to intelligence, to include the establishment of au Executive Assistant 
Director for Intelligence, au OL, Field Intelligence Groups, and an Office of Law 
Enforcement Coordination, among others. 


1. The FBI has established Field Intelligence Groups (FIGs) at each of its 56 field offices. 
Who controls these resources on a daily basis, the local Special Agent in-Charge, the FBI 
Headquarters Office of Intelligence, or the Executive Assistant Director-Inteligence? 
Generally, who are the rating and reviewing officials for professionals serving in the FIG? 


e 
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Response: 


The Special Agent in Charge (SAC) or, in the case of the New York, Washingtón, 
and Los Angeles Field Office es, the Assistant Director in Charge (ADC) 18 
ultimately responsible for the daily operation of the Fics. 


Those assigned to the Fis coordinate, manage, and perform intelligence 
functions Accordingly, they receive performante-rslated oversight and direction 
from ihe FIG chain of command. Special Agents assigned to the FIG are rated by 
the FIG Supervisory Special Agent (SSA). and reviewed by the Assistant Special 
Agent in Charge (ASAC) for a pa Analysts are rated by the FIG 
Supervisory Intelügence Analyst (STA? and reviewed by the FIO SSA. Ifa field 
office dues not have an SIA, the SSA becomes the rating official for that office's 
analysts and the ASAC would then assume the role of the reviewing official 


2. How many FIGs have reports officers currently on board? 


As of 3/18/04, 49 of the FIGs have reports officers on board. There are currently 
58 active reports officers on board across these 49 field offices. The FBI has a 
funded staffing level of $1 reports officers for FBI field offices, and the selection 
and background investigation process to fill the 25 nnencunibered positions is im 
progress In the deld offices in which no reports officer is currently assigned, FBI 
analysts are performing the reports officer function and will continus to do so 

until reports officers are brought on board 

3. How many reports officers are an board across the FBI (please include a breakdown by 


v. 


field office and Headquarters}? 


Response: 


There are 44 reports officers assigned to PBIHQ:; 24 m CTD, Pin OL and Lim 
the Countenntelligence Division. Currently 56 reports officers are on board iu 
field offices 


4. Do the FIGs have access to national intelligence, or only that which is collected locally 
by the FBI? What is the relationship between FIGs and analysts at FBI Headquarters? 





Response: 
Yes, FiGs have access to nationa intelligence iu a variety of ways, including 
liaison with members of the USIC, e established networ: rks W de the FBIS state, 
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local, and tribal partners, and through established communication and reporting of 
national intelligence matters to and from FSIHO. 


The FIG 1s the centralized intelligence component in each field office responsible 
for the management, execution, and coordination of the intelligence function. As 
part of that function, FIGs rowtinely communicate with analysts and other 
intelligence personnel at FBIHO to exchange pertinent intelligence, to report raw 
intelbgenes information, and to share other information deemed of national or 

egional significance In addition, FiGs report intelligence to FBIHO analysts and 
other intelligence personne! for dissernmation outside of the FBI, including 
dissemination to members of the USIC and of the state, local, and tribal police 
communities. 


5. Whatis the relationship between FIGs and other locally stationed representatives of the 
U.S. Intelligence Community? 


Response: 


Locally stationed representatives of the USIC operate under the auspices of ihe. 
FIG in their mteractions with local FB] Beld offices. In general, the FIG serves as 
the centralized intelligence component that coordinates intelligence functions and. 
information shanng with representatives of the USIC. 


5. FBI publications indicate that these FIGs are structured differently based on the size of 
the field office. Is the size or type of field office positively correlated with the foreign 
intelligence or terrorist threat to the United States? 


Response: 


The size of a field office is based on current and emerging national security 
threats, criminal threats, and demographic and geographic factors. Sumilatly, the 
size ofeach FIG is based on these same factors within the particular field office 
structure 


7. How are these FIGs being utilized? 


Response: 


The FIG is used to centrally manage the FBI's intelligence functions in the field 
office and is responsible for the management, execution, and coordination of 
intelligence cycle functions (requirements; planning and direction; collection; 
processing and exploitation; analysis and production; and dissemination). 
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3, How many FIGs are managed by analytical personnel? 
Response: 


The FiGs in the following four FBI field offices are managed by analytical 
personne! (namely SLAs} Charlotte, Cleveland, Denver, and Port ia nd 


9. Do the F1Gs report directly to the Special Agent-in-Charge or the Assistant Director-in- 
Charge? 


Response: 


In most feld offices, the FIG is directly ps aie by an SS.A who reports to the 

ASAC of the Intelligence Program. However, there are a few exceptions. In 
some of the FBI's larger field offices, the FIG 1s comprised of several squads. For 
example, in the New York Field Office the FIG consists of five squads. Each of 
the five squad supervisors reports directly to the ASAC for Intelligence, who is 
subordinate to the SAC for CT, In the Los Angeles and Houston Field Offices, 
executive management created e GS-15 Program Manager position to directly 
supervise intelligence operations These Program Managers report directly to 
their respective SACs. | 


10. Has the FBI conducted any assessments of whether the FIGs are producing intelligence 
results better than old organizational scheme, in which analysts were Integrated with 
investigative/operational squads? 


Response: 


The FIGs provide an independent intelligence requirements and collection 
function; supervise and oversee effective standards for the intelugence analyst 
workforce; and provide planning and direction to al) other parts of the mtelligence 
cycle, Under the FIG concept, intelligence analysts continue to be Integrated, or 
interactive, with all squads, Resident Agencies, and Task Forces as necessary to 
fulfill the intelligences analysis responsibilities articulated in the FBI's Intelligence 
CONOPS 


Several assessments are underway to evaluate intelligence performance in the 
field offices Additionally, feld office inspections now focus specifically on 
intelligence performances 


11. Will ali newly recruited analysts (hired as a result of the ongoing initiative to hire 900 
analysts) allocated to the field be assigned to the FIGs? If so; does each of the FIGs have a 
plan of action as to how it will absorb, train, and deploy the analysts? Have these FIG 
plans been coordinated witl the Headquarters Office of Intelligence? 
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Response: 
Not all new intelligence analyst positions will be allocated to field offices AH 
intelligence analysts who are.assigned to the. field will be admumistratively 


assigned to a FIO for performance oversight and management, 





New field office mspection standards include a review of the field of ifice’s plans 
for the assessment and development of ite intelligence analyst complement. The 
Ol worked with the Inspection Division to develop ths inspection a The 
FIGs have been supplied with various CONOPS and other guidance to assist them 
1n assigning, deploying, anc providing training opportunities for intelhgence 
analysts. 


12. The FBI plans to collocate elements of the Counterterrorism Division with the 
interagency Terrorist Threat Integration Center and the DCI's Counterterrorism Center. 
Presumably this move is being made to integrate more elosely U.S. counterterrorism 
activities. Is this a merger of equals? How will law enforcement equities be protected? 


Response: 


CTD, TTIC, and CTC are not merging. The FBI is collocating a | portion of CTO 
in the building occupied by TTIC, but these CTD elements will retain their 
identities, including their separate chain of command and reporting structures. 
CTC will also relocate a portion of its organization to the same building. The 
collocation will not adversely affect law enforcement equities, but is instead 
intended to improve operational coordination, edharice interaction, facilitate 
information sharing, and create a synergy among U.S. officials engaged m the war 
against terrorism. 


13. Precisely how will information and cases he managed so as to prevent, consistent with 
current L.S. law and regulation, foreign intelligence entities from Investigating or 
surveying U.S. citizens domestically? 


Response: 


The FRI CTD is not merging with the other agencies, bat will collocate with them 
to amprove operational cooperation. Tus collocation will not result in the 
creation of a new organization and the FBI will continue to conduct its activities 
in accordance with all appúcable legal guidelymes and intemal authorities. 


Mumerous authorities impact the Bureau's investigative process and govern how 
the FBI manages information and cases. These include the USA PATRIOT Act, 
the Attorney General Guidelines for FB: National Security Investigations and 

Foreign Intelligence Collection and Foreign Cl Investigations, and FISA. These 


= 
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authorities will remam in place after the collocation of the FBI's CTD, the TTIC 
and the DCI's CTC 


These authe onties and longstanding requirements with respect to the safeguarding 
of sensitive and classified information Gnciuding Executive Orders 12958, 12968, 
and 13292) um the conduct of Cl activities (including Executive Order 12333) 
will ensure that improved coordmation within the USIC does not have the adverse 
affect of ee the ability of foreign intelhgence entities to harm the interests 
ofthe United States or Hs citizens. 





14, Will the FBI retain its owa cadre of intelligence analysts, or will they all be 
incorporated into another analytical entity within the new organization? 


Response: 


Yes, the FBI will retain its own cadre of intelligence analysts, The collocation of 
three separate entities (TTIC, the DCPs CTC, and portions of the FBI's CTD) will 
nol create a new entity. Not all parts of CTD will be relocating to the new 
building, and those elements that are relocating will retain their distinctive 
operational responsibilities and authorities and will continue to report through 
their respective chains of command. As indicated above, the FBI's CTD has now, 
and will continue to have following the partial relocation, three core 
responsibilities: 1) managing CT pes within the United States to detect, 
disrupt, and prevent terrorist activities; 2) conducting analysis to support its own 
operations; and 3) producing and disseminating to all federal CT elements aud, as 

appropriate, to state and local law enforcement officials, intelligence reports 
resulting from these operations. Therefore, intel igence analysis will continue to 
be a critical element in CTD's organizational structure and operational capability, 
and they wili continue to support all three core CTD responsibihties 


15. Will such au organizational construct affect in any way the support the FBI's Counter- 
terrorism Division provides to FBI field offices? 


Response: 
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No. As mentroned previously, the collocation of the U.S. Government's primary 
CY entities 1n one building is not creating a new agency or organizational 
construct, Relocation of a portion of the FBI's CTD will have no effect on 
FBIHQ's relahonship with the 56 FBI feld offices with respect to ihe support 
provided, the dissemination of intelligence, the coordination of cases, or other 
operatronal matters. 
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BUSINESS PROCESS CHANGES 


1, In testimony before the Congress, the Director stated that the FBI has esatralized 
management of counterterrorism and counterintellisence programs. Presumably, FBI 
Headquarters has long exercised managerial control over cases opened, for the most part, 
out of the FBI's 56 field offices (the Office of Origin concept). Specifically, how has the 
new centralization initiative changed Headquarters oversight, influence over, and interest 
in counterterrorism and counterintelligence cases and operations? Does the Office of 
Origin concept remain in place? 
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The centralization of the FBI's national security programs applies more to 
program management than to individual case management. As discussed further 
below, oversight of individual cases by FBIHO has been and is still generally 
reserved for complex investigations that rely on multipie FBI Divisions or 
multiple agencies, utilize sophisticated unvestigative techniques (requiring high 
level authonties), are highly sensitive oc high profile, or require FISA authority or 
a Title IN court order. Centralization at the program level, rather than at the case 
level, has increased significantly because of the benefits inherent in such 
centralization. For example, a centrally controlled and managed CI program 
ensures: 


E. The commitment of adequate resources to support an effective national CT 
program and accountability among field managers; 


VA A. shüft m emphasis from criminal and reactive to national security and 
proactive. 

m The pursuit of espionage prosecution when warranted and the use of other 
lawful neutralization techniques when espionage prosecution is nol 
possible. 

4, & remvigorated asset recruitment and validation program. 

3 A dynamic analytical process to assess and rank both foreign intelligence 
threats and national CI priores: 

5 Full access to the authorities necessary for many ofthe investigative and 


operational techmaues used in CI cases, including FBIHQ managers, the 
FBI Director, the Attorney General, and the DCI all of whom are located 
in the Washington, D.C area. Unlike enminal cases, which typically rely 
on investigalive aulhonties avaiable io Beid offees because they are 
exercised by SACs, Umted States Attomeys, and the local federal 
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jucierary, in CI cases these authorities have only moderate authonty. Por 
example, the FISA requires that FISA matters be handied exclusively 
through the Foreign Intelligence Surveiliance Court located iu 
Washington, D.C. 


and 


The FBI's ability to respond appropriately to an adversary that is very 
different from a traditional criminal defendant. For exemple, in CI matters 
the adversary may be a foreign intelhgence service that has a centrally 
controlled bureaucracy with a sirategy, plans, and budget, or it may be an 
intelligence service that operates asynumetrically from amorphous 
collection platforms as well as through more traditional symmeincal 
means. Defeating and disrupting an organization hke the latter requires a 
comprehensive strategy and program plan Success would likely not result 
from a piece-meal approach, but would be possible based on an approach 
that incorporates robust centrally dnven strategic analysis as well as local 
tacfical analysis. 


With respect specifically to mdividual case management, the Office of Origin 
concept remains in place for CT mivestigations. The FBI has traditionally allowed 
SACs great latitude in all facets of investigative strategy and categories, and SACs 
and their Seld agents still exercise overall operational and day-to-day control of 
the vast majority of individual cases. 


As indicated above, increased FB] oversight and centralization of individual cases 
is somewhat more frequent now than in the past because more FBI investigative 
assets are focused on CT and these cases more frequently involve multiple FBI 
Divisions and multiple agencies. Because individual offices may have a narrower 
view of the FBI's overall CT program and a limited ability to interface daily with 
the multitude of foreign and domestic organizations often involved in CT 
investigations, increased cedtrahzation allows FBIHQ to set, monitor, and adjust 
nanona pniomtiss and to coordinate information analysis and intelligence sharing 


In rare situations, FBIHO exercises operational control of an investigation counter 
to the desires of an SAC. In most cases this is because the overall strategic 
objective is different from the field division's objective. Operational 
determmmiations such as thus are normally discussed at length before 
implementation. 


2. How, if at all, has this centralization initiative shifted the relative balance of power 
between FB1 Headquarters and Field Special Agents in-Charge? 
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Response 


3. Consis 


The nationally managed and centrally driven CT and CI programs offer the benefit 
ofcousistent and focused guidance and direction SACs do, though, still retam 
control of their investigative assets, and any balance of power shift between 
FBIHQ and the field SACs required by a complex or multi-agency case is usually 
understood as appropriate and beneficial for the overall effectiveness of the 
Bureau. For example, while the Assistant Director for CI clearly sets program 
parameters through the development of the CT strategy and program plans, SACs 
continus to exercise control aver Seld affice operations and SACs generally 
welcome CI program guidance and direction. — 


tent with legislative initiatives codified in the USA PATRIOT Act, the FBI has 


outlined a new investigative strategy for terrorism cases known as the Model Counter- 


terrorism 
cases inte 


Investigative Strategy QVLCIS). How exactly are criminal and national security 
grated pursuant to this uew strategy? How is this strategy being implemented at 


FBI Headquarters and in the field? 


Response: 


In the past, investigators would have focused solely on either intelligence 
coflechon or criminal prosecution Recognizing that the long-term goal of an 
international texronsm investigation is the development of intelligence regarding 
all aspects of the terrorist threat, the MCIS empowers field offices to utilize a 
variety of means, ranging from non-cnmunal measures to prosecution, to resolve a 
threat, but emphasizes the need to conduct intelbgenes investigations m order to 
fully identity the nature and extent of the threat, its perpetrators, and hnkages to 
terrorist groups However, because of their nature, international terrorism 
uvestigations are nationally managed by CTD under the MCIS to ensure that field 
offices coordinate with the appropriate CTD operational, analytical, reports 
dissemination, and operational support units dunng the course of each stage of an 
invesdgalion. 


4. Does this strategy incorporate domestic terrorism and international terrorism cases? 


Response: 


REG. 


The MCIS applies only to International Terrorism investigations. Consequently, st 


does not address domestic terrorism investigations, which are conducted pursuant 
to the Attomey General Guidelines on General Crimes. 
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ENABLING CHANGES 


i. Historically, there has been little in the way of formal career paths and development for 
both Special Agents and intelligence analysis who wished to spend their entire career 
working in the FBI's counterterrorism aud counteriutelligence programs. What specific 
measures have been put into place to establish formal intelligence career paths for Special 
Agents and intelligence analysts? . 


Response: 


Analyst Career Tracks: The FBI has instituted an analyst career track that offers 
three different analyst career paths, After analysis reach a certam level of 
seniority (the GS-11 level), they are asked if they are interested im: (1) building 
expertise in a specific program area (such as al Qaeda); (2) gaining broader 
expertise that will prepare them to work ina broader number of program areas, or 
(3) working toward becoming a supervisor or manager in the Intelligence 
Program Traming and temporary assignments appropriate to a particular track 
are first offered to analysts 1n that track. 


Special Agent Career Tracks" Traditionally, the Bureau has reenuited, trained, 
rewarded, and promoted its agents for law enforcement work, This approach was 
adequate so long as the Bureau's mission was perceived primanily as law 
enforcement, Now that intelhgence work has assumed a central role in the FBIs 
efforts to prevent terronsm, this approach is no longer adequate. Consequently, in 
March 2004 the FBI established a new career path for Special Agents designed 
with three objectives. First, the career path will give all FBI Agents expenence 
with intelligence and analysis. Second, the career path will provide an 

opportunity to develop specialized skills, experience, and aptitudes in one of four 
priority areas: (1) intelligence; (2) CT/CT; (3) cyber; or (4) criminal, Third, st will 
make intelligence expertise and experience prerequisites for elevation to senior 
supervisory ranks. This plan will produce a cadre of Special Agents who are 
proficient in the processes of intelligence collection, but who also have the law 
enforcement skills and knowledge necessary to take advantage of our integrated 
operations! approach. 


2. How many intelligence analytical personnel serve in the Senior Executive Service at the 
FBI? 
Response: 
The FBI has three Sensor Executive Service positions classified in the 0132 series. 
We are developing formal mechanisms to prepare analytic personnel for entry into 


senior positions and working to create additional executive positions, both 
management and technical, to lead the FBI's Inteihgenée program. 
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3. How many intelligence analysts are employed as nou-managerial GS-15 personnel? 


Response: 


The FB: has many 0132 personnel af the GS-15 level, but they are currently all in 
managerial positions. The FSI is exploring mechanisms to establish non- 
supervisory GS-15 analyst positions. 


4. Can Special Agents in field offices be unwillingly reassigned from national security to 
criminal work at the bekest of the local Special Agent-in-Charge? 


FRI Special Agents in Field Offices are assigned based on the FBI's paontes, the 
threat environment in the Field Office's territory, and the Knowledge, skills, and 
abilities of the Special Agents available. SACs have the latitude to make 
assignments in the Fieid Office according to the needs af the FBL 


$. Are Career Boards now structured in such a manner (having clearances and a "need to 
know") that allow them to review fully a Special Agent's of intelligence analyst's work 


products for promotion consideration? 


Response: 
New promotion procedures were established for all FBI 0132 Intelligence 
Analysts m December 2003 These procedures establish promotion boards to 
review an analyst's work products and demonstrated skills to determine ifa 
promotion is mented, 


All career board members have the necessary clearances to review an employee's 
work product. The estabhshed procedures include a provision to allow promotion 
assessment by a different means if an employee's work products are extremely 
sensitive and review by promotion board members would be inappropnate. 


The Special Agent career boards are able te review alí necessary information iu 
considering premotions 


6. Specifically, what new training initiatives have been implemented and are in place that 
enhance new and experienced FB] employee training on intelligence matters? 


Response: 
Please see the response io question 12 in the "Analysis and Intelligence Cycie" 
secnon 
$1 
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7. Do Special Agents train jointly with CIA Directorate of Operations Intelligence Officers 
regarding intelligence asset recruitment methodologies? Ii not, why? 


Response: 


FRI Special Agents do not tram jointly with CLA Directorate of Operations 
Intelligence Officers regarding intelligence asset methodologies because of the 
difference in the two agencies’ missions the FBI mission incorporates law 
enforcement, whereas the CLA focuses only on intelligence, The PBI is working 
with our partners in the USIC to develop a training curriculum that focuses on the 
skills and knowledge needed by the FBI's Special Agents in this area. 


8. How and to what extent bas the FBI's College of Analytic Studies drawn ou the 
experiences of other U.S. Intelligence Community agalyfical training groups, such as the 
CIA's Sherman Kent School, and the Joint Military Intelligence C ollege? 


Response: 
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As a result of the funding appropriated by Congress koe d to support FBI 
Intelligence Analysis Training, a number of fundamental intelligence analysis 
training modules that are now used within the USIC will be adopted for use in FBI 
aualyst traning. The FBI's strategy includes the use of expenenced contractors to 
help identify relevant courses, subject matter experts to provide training, and a 
“train the trainer" approach to help build a cadre of effective intelligence analysis 
instructors within the FRI 


The CAS has drawn primarily on the expertiso of thres USIC training and 
development organizations as it revises and enhances its analytic training. 


Sherman Sent School. College representatives initiated meetings with Instructors 
from the Sherman Kent School (SKS) in the Spring of 2002. After numerous 
meetings and discussions, instructors from the SKS developed two weeks of 
training for inclusion m the FBI's six-week BLA course Further, under the 
auspices of the College, numerous SKS courses were delivered to FBI analysts 
both at the Agency's facility in Lake Fairfax, Virginia, and throughout various FBI 
feld offices. The College continues a close working relationship with the SES 
and 15 in the process of iniiahrig contract procedures to obtain the services af 
various contractors ongmally hired by the SES to deliver similar training to FBI 
analysts, 


Detense Intelligence Agency C allege Bun i enjoy a productive working 
elationship with the Defense Intelligence Agency (DIA}. A comprehensive 
practical exercise, onginally created by v DÍA i included in the Colleg ges six-week 
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BIA course. In fact, DIA instructors are cften used io evaluate FBI analysts’ 
presentations at the conclusion of the DIA exercise. 


Joint Miltary Intelhgence College: Representatives from the College met 

E nsively with staff from the Joint Military a iligence College (MIC) during 
the Spnng and Summer of 2002 and examined JMIC's cumculum to determine 
how 1t could be incorporated into FBI analy a aimag Both partes agreed that 
the best vehicle for taking advantage of the JMIC's expertise would be the 
establishment of a "scholarship" program ilietetiy the FBI would send analysts to 
JMIC to obtain a Master of Science degree m Strategic Analysis, The FBI 
initiated such a program during FY 2003 . 


9. By what performance criteria is the FBI assessing the outcomes of its new training 
initiatives? Have any studies been conducted? If so, what are the results? 


As indicated in earlier responses, intelligence analysts’ basic and advanced 
tralming courses are being revised and improved In the current basic intelligence 
traimng module, students are afforded an opportunity to complete Level 1 
evaluations, Le, how they reacted to the instruction, The evaluation results have 
revealed consistent student satisfacnon with the training they recerved 


Level 2 evaluahons, Le., learning impact as a result of the traming, are primarily 
conducted via the practical appheation of learmng through class exercises, 
Students participate in numerous group exercises which provide them with 
opportunities to apply the knowledge they have gained to real world situations. 
Thus level of evaluation is also being expanded dunng FY 2004 to include a 
comprehensive final exam at the conclusion of the six-week BLA course, 


The College has not had an opportunity to apply evaluations at Level 3 (behavior) 
or Level 4 (rectum to FBI) because of the evolution of intelligence analysis 
processes within the FBLitself. However, the College anticipates being able to 
implement these two levels of evaluation m FY 2005 with the benefit of Of's 
CONOPS and supporting policies and procedures and the development of the 
expanded basic analyst course (ACES D. 


10. The FRI continues to update its information technology in support of its mission, 
Numerous General Accounting Office and Department of Justice - Office of Inspector 
General studies have critiqued the lack of an overall enterprise architecture for the changes 
currently being made. Has the FBI developed an enterprise architecture for integrating the 
many ongoing information technology improvement projects in which ii is engaged? 


LA 
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Response: 


he FBI I realizes the importance of an Enterprise Architecture (EA), and therefore 

; as established a formal EA program The FBI 15 aware of the criticisms made by 
ie General Accounting Office (GAO) and the DOJ Inspector General, aud agrees 

"m appropnate corrective actions must be expedited. An EA policy statement 
that provides guidance and direction for the EA program was approved in 
September? 2003 and is being implemented. In addition, an FBI Enterprise 
Architecture Board (FAB) has been formally established, with representation 
across the Bureau, to evaluate ado tecturally significani projects in order to 
ensure compliance with standards and the information technology (IT) operating 
environment. Architectural reviews have become an integral part of the IT 
investment management process, and FBI procedures now require that all projects 
with a lifeume budget of over $10 million be approved through the board aud 
signed by the Chief Information Officer (CIO) 


Au IT Strategic Plan provides guidance for the EA staif's development ofa "To 
Be" architecture that enhances the FBI's IT support, The CIO has initiated the 
development of 2 formal EA Staff to address: business/mission, application, 
information, infrastructure. and secunty. On March 19, 2004, the FBI awarded a 
contract for products that will achieve EA compliance with GAO's "management 
matenty level three" in FY 2004 and with "maturity level four" in FY2005. The 
CIO as additionally developing policy that will require solution architects to be 
part of the team responsible for the design and development of FBI systems, 


11. When will the Trilogy's Virtual Case File (VCF) system be operational? 
ESPORSE: 


The Computer Sciences Corporation completed the replacement of FBI computer 
hardware on 4/28/04. The final phase of Tnlogy is upgrading of the FBI's case 

management software by converting from the ACS system to the VCF format. 
The FBI is currently working with the Science Applications International 
Corporation to determine what needs to be adjusted to meet the Director's 
completion deadline of the end of 2004. 


12. When the VCF is operational, will investigative/operatioual squads (consistent with 
appropriate security procedures) in the field be able to restrict an analyst's access to 
documents developed as a result of ongoing investigation and operation? 


Access controls on VCF-created inves sagative records are a component of the 
secunty model bemg implemented. These access controls are defined both i uy the 
34 
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user's roie and the document level or type (such as grand jury matemal). Legal 
restrictions on access and ‘estristions imposed by policy will be no greater than 
necessary to protect investigativo integrity and will be developed wath a sensitivity 


to the importance of full information in an analyst's efforts to "connect the dots." 





13. What is the status of the FBI's elecironic connectivity te the rest of the U.S. Intelligence 
Community? What information technology iuitiatives have been implemented to ensure 
more timely sharing of intelligence between the FBI and other entities of the US. 
Intelligence Community? 


Response: 


The FBI is connected to the rest of the USIC at the Top Secret SCI level via the 
new SCI Operational Network (SCION) The SCION project was initiated m 
September, 2001, and has met all schedule, budget, and performance 
requirements. SCION connects to the USIC (intelink) via the Metropolitan Area. 
Network and JWICS. SCION is the business tool for the FBI's OI, CT, and CT 
bed and has enabled FBIHO CT and CI personnel to perform iheir duties 

v efficiently and effectively. For example, the FBE uses SCION to contribute 
k i President's Terrorist Threat Reports and ITRs. 


SCION 1s currently available to over 1000 users at FBIHQ, and the FBI has 
initiated a pilot deployment project in the New York, Boston, and Kansas City 
held offices. As s fündig becomes available, SCION will be made available to all 
FBI field offices. Limited access to Intelink 15 available in most field offices 
through the FBT Intelligence Infornaton System Network (TISNET), though this 
access is accomplished through older and often inadequate workstations located m 
small Sensitive Compartmented Information Facilities (SCIF) that are not 
accessible to all Special Agents or analysts. An impediment to field expansion of 
Intelink is the lack of SCIF space for FIG and ITTF personnel. 


Access to the intelligence and homeland security communihes at the Secret level 
is provided via the Department of Defense SIPRNET, which provides the 
communications backbone to INTELINK-Secret. The FBI has established a small 
SIPRNET presence, but requirements for this access are increasing dramatically, 
including the need for INTELINK-Secret access at each JTTF, FIG, and Regional 
Counterinteliigefice Working Group for each assigned Special Agent and analyst 
The FBI's goal is to provide SIPRNETANTELINK-Secret access through secure 
dynamic virtual private networks to all FBI workstations in the future: o Anti- 
Drug Network ndes the SIPRNET communications backbone and provides 
terminalis and access as a velucle for the domestic exchange of intelliget ence on 
anti-drug efforts. 
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For the transmission of official information to other agencies, the FBI has just 
implemented its now FBI Automated Messagimg System (FAMS), which is based 
on the Defense Messaging System (OMS) and will provide writer-to-reaier secure 
e-mail to both intemal and external users. The FBI is the first civilian agency to 
operate the classified DMS FAMS will permit on-line message creation, review, 
and search capabilites to everyone connected to FBINET, FAMS gives the FBI 
the capability of sending aad receiving to any of the 40,000 DMS and 
AUTODIN addresses. A TS/SCI version of FAMS 18 currently being tested and 
wil] provide the same capability to everyone on SCION or HSNET.. Within the 
government, DMS will replace AUTODIN and a diverse array of e-mail systerns 
Currently in use throughout the Department of Defense and the USIC, in its final 
form, DMS wil become the government's globai secure e-mail system, providing 
certified interoperability for over 2 million crvihan and military users and 
permitting multi-media attachments to messages and provide end-to-end security. 


The FBI is just beginning to implement data mart programs as part of the 
Intelligence Community System for Information Sharing (ICSIS), and the first FBI 
TS/SCI IC Data Mart (CDM) 15 currently in development. The FBI will apply 
new security technology to deploy a Protection Level 3 Data Mart capability with 
discretionary access controls and Publio Key Infrastructure certificates in support 
of closed Communities of Interest, which will permit secure sharing of our most 
sensitive data with trusted members of other agencies. Current FBI intelligence 
products (intelligence bulletas and raw HRs) are being published on FBI web 
sites connected to SIPRNET and JWICS The FBI does not yet publish metadata 
with these products, but we are in the process of meeting this requirement. The 
EBI is also working with DOJ on interfaces between ICSIS and the Law 
Enforcement Information Sharing initianve, and with the FBI's Criminal Justice 
Information Services Division to increase the shanng of intelligence related 
information with state and Jocal officials. 


The FBI is also investigating the use of sscure one-way transfers to move 
information between secunty domains and to permit all-source intelligence 
analysis, and the use of next-generation, community High Assurance Guards is 
being planned to provide for the two-way transfer oa entical intelligence between 
secunty domains. Secure wireless connectvity and Virtual Pnvate Networks are 
also benig cousidered to improve access to intelligence by deployed personnel. 
The FBiis also starting to use on-line, desktop collaboration tools such as Info 
Work Space, which is the foundation for the Inteligence Community 
Collaboration Portal lo increase intelligence collaboration. 
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